compendium-heroicum.de

Issued by EuropeanSSL Server CA 2

About this certificate

This digital certificate with serial number be:86:42:19:95:c9:cd:90:85:81:34:37:c3:1d:b9:5f was issued on by EUNETIC GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=compendium-heroicum.de,OU=Domain Control Validated+OU=Provided by EUNETIC GmbH+OU=EuropeanSSL Trial

EUNETIC GmbH

Organization: EUNETIC GmbH
State / Province: Baden-Württemberg
Locality: Durmersheim
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): be:86:42:19:95:c9:cd:90:85:81:34:37:c3:1d:b9:5f
Serial Number (int): 253250427644272817925005966607258597727
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cc:f1:ac:51:67:00:20:8b:54:3a:98:7a:84:b7:f7:97:5c:cf:cd:d7
AuthorityKeyId: ee:e7:c5:9d:6f:48:1d:17:cb:d7:4e:3b:6a:02:0c:af:cf:e0:b6:bf

Fingerprint (sha1): ba:a6:88:0b:5c:b4:3b:fc:2f:b3:11:e5:bd:f7:66:d5:6f:ac:6c:18
Fingerprint (sha256): d6:d9:f2:36:6d:e5:94:c4:2e:39:b1:28:08:6a:9e:d2:be:df:e7:fb:83:e7:2c:68:15:23:0d:76:0e:59:e8:02

Issuing Certificate URL: http://crt.usertrust.com/EuropeanSSLServerCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/EuropeanSSLServerCA2.crl

Check the revocation status for certificate compendium-heroicum.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for compendium-heroicum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

compendium-heroicum.de
www.compendium-heroicum.de

Other certificates including the domain name compendium-heroicum.de

(limited to 100 certificates)
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
www.compendium-heroicum.de
www.compendium-heroicum.de
www.compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
www.compendium-heroicum.de

Certificate

The complete raw certificate details for compendium-heroicum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHVzCCBj+gAwIBAgIRAL6GQhmVyc2QhYE0N8MduV8wDQYJKoZIhvcNAQELBQAw
eTELMAkGA1UEBhMCREUxGzAZBgNVBAgMEkJhZGVuLVfDvHJ0dGVtYmVyZzEUMBIG
A1UEBxMLRHVybWVyc2hlaW0xFTATBgNVBAoTDEVVTkVUSUMgR21iSDEgMB4GA1UE
AxMXRXVyb3BlYW5TU0wgU2VydmVyIENBIDIwHhcNMTgxMDI0MDAwMDAwWhcNMTgx
MTIzMjM1OTU5WjCBgzEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVk
MSEwHwYDVQQLExhQcm92aWRlZCBieSBFVU5FVElDIEdtYkgxGjAYBgNVBAsTEUV1
cm9wZWFuU1NMIFRyaWFsMR8wHQYDVQQDExZjb21wZW5kaXVtLWhlcm9pY3VtLmRl
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1+KTsAxTOy+sNEJC/jBd
LQEHCGYq44dGbh8C90X2NNd8OwNNzfbFG5+/tUAls64heH4zLKM7Gxwc2b67lhjX
mt9gvXR/n2/1KBNvbgOCTjlIab8fZf9KAsogi7z5pwwotNAo6BgoPuP8pEdhYXd9
6om3OdkqIMjazmheVC2rdC+2m9kWI0rgs6GKPavanyb0pDOfC9izG8VT+3ai86t+
fD5OXIVcvVNW8MvDLM6aYnu+Mdpk5STY7Z5TqxZ6AE03fiIqF1506b772yfDajR7
N6BIOn+MRVmLDAYOOjejHSS8gD7giEePof3CO5GyrUh69m3SLYwKepoUWSw1KB9l
l3WsUnmg4BjooqWp35N2C0zXR+xdJLUo8sOb998ba9jBBfhmm4q4R3rkWsNUCZIN
ka3vt1iIL+2H7ZT+AT39vUeJy9EkWkURPEOXB7HOAbJeY2+RqH+9IdqZ72t+ayGJ
IYUj7zdy7RIauAvfLOyVexSy1ZQwYAEfU8AeXXYdREDbIuuQ7wHMZpkOj8xYiYk9
cdRgNqHm6f9xsZ2SSKAqT2SbhFGYIeJUPuP6RYIZv6CpapzMyelFvMLa5j74v0GS
LmtkE8FNMY51e+Ixsaa5wGg4zyI6mRfMu3OcNjFvMYAPoCoPONFlEwE6hjUJ0JJU
2lzWWNz+4zOfgtonwZRwuYkCAwEAAaOCAs0wggLJMB8GA1UdIwQYMBaAFO7nxZ1v
SB0Xy9dOO2oCDK/P4La/MB0GA1UdDgQWBBTM8axRZwAgi1Q6mHqEt/eXXM/N1zAO
BgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1BgorBgEEAYHyagEBMCcwJQYIKwYBBQUH
AgEWGWh0dHBzOi8vY3BzLnVzZXJ0cnVzdC5jb20wCAYGZ4EMAQIBMEIGA1UdHwQ7
MDkwN6A1oDOGMWh0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9FdXJvcGVhblNTTFNl
cnZlckNBMi5jcmwwdAYIKwYBBQUHAQEEaDBmMD0GCCsGAQUFBzAChjFodHRwOi8v
Y3J0LnVzZXJ0cnVzdC5jb20vRXVyb3BlYW5TU0xTZXJ2ZXJDQTIuY3J0MCUGCCsG
AQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMD0GA1UdEQQ2MDSCFmNv
bXBlbmRpdW0taGVyb2ljdW0uZGWCGnd3dy5jb21wZW5kaXVtLWhlcm9pY3VtLmRl
MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+w
ctiDAMR7iXqo/csAAAFmpZmOyQAABAMARzBFAiEAxFkCZdtdyFtQLt2QOa/WjIs2
nPtaGEr1LmaYvU+q6XcCIFhRBFrRuYzRfs2ez+e8nMFRZoduwPulln57Ca4PrN8l
AHUA23Sv7ssp7LH+yj5xbSzluaq7NveEcYPHXZ1PN7Yfv2QAAAFmpZmO9QAABAMA
RjBEAiAf7zItpmDU/5s2vQsArheBN8vygNXbI5m/jHiZW7yrMAIgHztCzlLvttbl
0+9sOhYL9OZGoq60ueMM3BrBNoBekdAwDQYJKoZIhvcNAQELBQADggEBACLTL7kl
/D8ZseQjP6EXCHzBSZ9vPHqEsFFUaRH7fl7fk8j0wUVhxZ50dwfGepdxnDc4Uh8S
vd2TEYIBO7AS9gwBYrpqNQcQtTB6nmwzjNpwzlGiG3eu7syjf1Tqv5u+obxnieLe
SE88GX5i3M2pLj+UEwpBQLHljKXpH6rka7sv9sjXBETs64sDYGIAkkikgZzPNi1O
GYbRBG3zyzsngLz6Ep7CuZJc1sc8/I4G2vj6g8w4XEofMcfkRKj+MfD75OtLIQXR
NOsDkc7E5kywxiCjJe+vGnlej0hZd2/E+fm2xkQvrn84jRL89qc5sB51/Kipi7AR
4wH2+wVCoHq9KK4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 253250427644272817925005966607258597727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Durmersheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EUNETIC GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EuropeanSSL Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by EUNETIC GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EuropeanSSL Trial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'compendium-heroicum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880734229024960728023854416949134921208604811413470459549727904898997499316331119861867158154105688315327861983275916136529357457133684386389555285088804896766927693944199452427722506881580950471753734527079713277892565385446060751563956735985361559618715252378898633560633823537237307675024126683568087773446310245122318504506959681555721348659974184522849943414718472907515424077087521293482281686739805220437171928237261164282111725022860885146374206419079190589283013482754925977022049153709444089278105025841189290068206126044816336212241747372211644447460666233959410085660526074850130889524690216754732776063492918021396455761323794928030047455196970051543399418558474350944510500698244035110457478320898333465866216641565318169813911812555043243404784644390871606219823704070369618064799802456454239671998307654141919049907593807836301130312460629344642706746215893484724143613016186692732910928340063795065366612711350652169240398089432583997053342086506093271453636598245336870591196273439932290751136925051532093901069842025361340385253993272162031569701557897804152191115470418624205386152027917224283271792411660371575444341193794059109794546884623024092370455786338801092654547461551278226381508847542929414912681752969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eee7c59d6f481d17cbd74e3b6a020cafcfe0b6bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccf1ac516700208b543a987a84b7f7975ccfcdd7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.31082.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/EuropeanSSLServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/EuropeanSSLServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compendium-heroicum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compendium-heroicum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000166a5998ec90000040300473045022100c4590265db5dc85b502edd9039afd68c8b369cfb5a184af52e6698bd4faae97702205851045ad1b98cd17ecd9ecfe7bc9cc15166876ec0fba5967e7b09ae0facdf25007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000166a5998ef5000004030046304402201fef322da660d4ff9b36bd0b00ae178137cbf280d5db2399bf8c78995bbcab3002201f3b42ce52efb6d6e5d3ef6c3a160bf4e646a2aeb4b9e30cdc1ac136805e91d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0022d32fb925fc3f19b1e4233fa117087cc1499f6f3c7a84b051546911fb7e5edf93c8f4c14561c59e747707c67a97719c3738521f12bddd931182013bb012f60c0162ba6a350710b5307a9e6c338cda70ce51a21b77aeeecca37f54eabf9bbea1bc6789e2de484f3c197e62dccda92e3f94130a4140b1e58ca5e91faae46bbb2ff6c8d70444eceb8b036062009248a4819ccf362d4e1986d1046df3cb3b2780bcfa129ec2b9925cd6c73cfc8e06daf8fa83cc385c4a1f31c7e444a8fe31f0fbe4eb4b2105d134eb0391cec4e64cb0c620a325efaf1a795e8f4859776fc4f9f9b6c6442fae7f388d12fcf6a739b01e75fca8a98bb011e301f6fb0542a07abd28ae