gaitcitrix.dhl.com

- Deutsche Post AG -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 4e:a8:6d:96:70:8b:99:21:4e:cf:3d:51 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutsche Post AG

Organization: Deutsche Post AG
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:a8:6d:96:70:8b:99:21:4e:cf:3d:51
Serial Number (int): 24343447816828160831990480209
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 13:41:ca:d2:ae:9b:7d:fe:e8:14:36:c4:fb:60:98:6c:2e:60:fc:2e
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 33:e3:c7:88:19:9d:df:22:37:b7:1f:7c:f8:0c:8e:bc:d9:e0:d2:54
Fingerprint (sha256): 00:3a:cc:c2:bf:80:92:d6:84:dc:79:e2:e7:35:7d:5f:bc:87:3e:e7:1a:47:a8:3e:a2:c1:4c:06:18:c9:f2:52

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate gaitcitrix.dhl.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gaitcitrix.dhl.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gaitcitrix.dhl.com

Other certificates including the domain name dhl.com

(limited to 100 certificates)
dsctmspptr4.dhl.com
san-10-s10.tlsprovisioning.exacttarget.com
ideahub.dhl.com
CalidusTMS.dhl.com
direct.dhl.com
fcp-backend.dhl.com
tm300i.dhl.com
gaitcitrix.dhl.com
tradeteamdeg.dhl.com
api.dhl.com
jdadlxp1.dhl.com
dhllink-apimgnt-qa.dhl.com
gbsdoxis.dhl.com
cz-wgp-syr.dhl.com
payments-mybill-uat.dhl.com
agente.dhl.com
iis.ecm.stars.dhl.com
docs.dhl.com
esolutions.dhl.com
confluence-test.dhl.com
parcelshop-ref.dhl.com
prgdclyaee01.dhl.com
dsc6stars-aca.dhl.com
flysmart.dhl.com
lots.dhl.com
dgf-elp.dhl.com
dsctmsr2.dhl.com
beta.dhl.com
netconnect-bluedart.dhl.com
packet.deutschepost.com
D5UsO9AHbG.dhl.com
test-api.freight-logistics.dhl.com
dcscbj.dhl.com
www.smartsensor-temperature-test.dhl.com
pp-meinservice-grax.dhl.com
csg.crest.dpwn.com
dci2.dhl.com
comuat.dhl.com
SPDP-ref.dhl.com
mits-ia4-ext.dhl.com
npts3test.dhl.com
www.dhltoolbox.se
V-DA-002.dhl.com
dhlexpress-myjob-api-test.dhl.com
external.customerreports.dhl.com
keyserver-lab.dhl.com
dcontest.dhl.com
imgit.dhl.com
test.gbs.dhl.com
*.datalake-dev.dhl.com
cyclone2-eu-prod.dhl.com
dpst.dhl.com
dci-dev.dhl.com
m.dhl.com
aux.dhl.com
webmail.dhl.com
dscotmllp05test.dhl.com
gatwickdirect.dhl.com
mailing.dhl.com
cvpn.dhl.com
reqit-dev.dhl.com
esecure-int.dhl.com
ryr.dhl.com
logistics.dhl
QA-tmsweb.dhl.com
apigbs.dhl.com
aviationmailsync.dhl.com
keurignj-6rivers-prod.dhl.com
czchoap0214.prg-dc.dhl.com
ADMSSCICERTWebService-temp.dhl.com
prgdclywse14.dhl.com
globalmaileurope.dhl.com
connectplus.dhl.com
kuldclyaee21.dhl.com
www.dhl.com
globalecom.dhl.com
cvpntest.dhl.com
back-eut.dhl.com
us-dsc-gvp-ac01.dhl.com
gsconnectcsm.dhl.com
isupply.dhl.com
irecprjb.dhl.com
dhlexpresspt.com
wsbexpressuat.dhl.com
amrta02app.dhl.com
servicenow-dev2.dhl.com
www.packstation.de
direct.dhl.com
fidgfcustomsdirectaccessprod.dhl.com
spl-test.dhl.com
onlineshipping.dhl.com
goarcbj1.dhl.com
czcholsint1661.prg-dc.dhl.com
portalemydhlplus.dhl.com
packaging.dhl.com
myaccount.dhl.com
mobilefleet-test.dhl.com
jupiter.dhl.com
mirror-bat.dhlec.dhl.com
cdex.dhl.com

Certificate

The complete raw certificate details for gaitcitrix.dhl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24343447816828160831990480209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 14:26:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-23 14:26:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaitcitrix.dhl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894998057763982395407235289673812721283265008324628312177494544644745971395258599476803867723730825797455050606050051592088978712321173895616098760249451478741142164682847283073539815809112670548101810111109836671988072763417568314658785133795335991898333964661535689935840649577394777214452341049078558850850565515753004935869141890978939504314439513659025772765510805003297073846387469052068051804351154418647953127493818895330671887947069504756566096952722162824241857129830312716154030942763003346319522657326463486281773201463044146207632263012004442787126532200033716111433439896790960022803738536768855811706738172288125912247677175395336335346664033571477756414858065892158921366435847518091059823770377165182131716627380269439796221051311656854788179994560290795870251558822640448410821005012721671278489141383997663354268900181540629726768170997004681648088386881016529881954621007584950518757243522971602617776202736044746990417044227132901692223922823100063243194022442569374213343495564615711262864741771926302501123163125824121233295260490841277224227139881676414240255988123907177693040081132919072511154145729764666591328278939053599655509137680500580674719947511896478567615910750008383705704227371673844774326266477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaitcitrix.dhl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1341cad2ae9b7dfee81436c4fb60986c2e60fc2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016a4a9725130000040300483046022100d1c70815160384954042464f6b2ef89f0a5264abce0470e20611ce52fddd58a4022100e9513721227dbdb368fa09dc5fdbb02cda03953034fb2487e51d16073ef57c730077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a4a97254e0000040300483046022100e9f9b530a1c0aa5353208abb5fcac8ac5948d153bd84279bac10c6879854ff80022100f673211ead03bca628a67cb97749784289515cb77892247fff9efa5070bacddd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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