www.pb.com

- Pitney Bowes Inc -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:0b:f9:90:6f:0e:7b:46:1b:7b:49:22:ab:f2:de:8c was issued on by DigiCert Inc.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Pitney Bowes Inc

Organization: Pitney Bowes Inc
State / Province: Connecticut
Locality: Stamford
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:0b:f9:90:6f:0e:7b:46:1b:7b:49:22:ab:f2:de:8c
Serial Number (int): 16012912978079928094733338956233105036
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9c:18:c8:76:9c:8c:59:62:5a:cf:eb:4a:3a:b0:77:e0:fc:90:c2:f3
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 19:73:87:c0:6d:c5:ed:40:02:64:84:a3:3d:78:62:ee:56:dc:66:28
Fingerprint (sha256): 00:5d:73:de:08:98:5e:78:a5:6d:eb:32:0b:b3:7e:99:95:31:4a:9b:35:83:63:fa:66:58:c6:4a:74:6d:fd:78

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.pb.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pitneybowes.us
www.pitneybowes.se
www.pitneybowes.no
www.pitneybowes.ie
www.pitneybowes.fr
www.pitneybowes.de
www.pitneybowes.com
www.pitneybowes.co.uk
www.pitneybowes.ca
www.pb.com
www.aem.pitneybowes.com
test-pbengageone.pb.com
support.pitneybowes.com
support.pb.com
store.pbui.us
stgsmb.pbmeter.com
stg.pitneybowes.com
stg-new.pitneybowes.com
static.cdn.pbui.us
stagecdn.pbui.us
rds001test-pbengageonone.pb.com
qa-cl.pb.com
prodtest.pitneybowes.com
preprodcdn.pbui.us
preprod.pitneybowes.com
preprod.pitneybowes.ca
preprod.pb.com
pitneybowes-support.com
pbupdate.pb.com
pbstage.pitneybowes.com
pbstage.pitneybowes.ca
pbstage.pb.com
pbengageonecsr.pb.com
pbengageone.pb.com
pbcdn.pbui.us
myaccount.pitneybowes.com
maintenance.pb.com
imaqaws.pitneybowes.com
imaqaws.pitneybowes.ca
imaqaws.pb.com
fr.pitneybowes.ca
failover-preprod.pb.com
en.pitneybowes.ca
cl.pb.com
cdn.pbui.us

Other certificates including the domain name pb.com

(limited to 100 certificates)
cometservmdck.pb.com
gpr.pb.com
www.pb.com
srmappp1.ct.pb.com
cometservldck.pb.com
tps414.d3.qa.pb.com
imperva.com
*.sl.pb.com
eccappq1.ct.pb.com
*.pb.com
qa.inside2.pb.com
usdc1-bmrappv01.pb.com
syk665.d3.qa.pb.com
grcdbcip1.ct.pb.com
cryptotest1.ssps_develop.ct.pb.com
sf.d3.qa.pb.com
Ludwig.ssps_develop.ct.pb.com
support.ecommerce.pb.com
ukcometlb22.pb.com
rates.sendpro.pb.com
imperva.com
anzcomettest.t3cloud.pb.com
isend.sys.pb.com
pbkdexe.pb.com
brcomet1.pb.com
cmtservpre2-ext.test.pb.com
teamsite.inside.pb.com
Citrix.Sendsuite.pb.com
Decometlb7.pb.com
qa.teamsite.inside.pb.com
*.test.pb.com
tds.d3.pb.com
www.pb.com
client.pitneybowes.com
sbo101.d3.qa.pb.com
remote1.pb.com
PBMD-EXE02.pb.com
nexpose.pscloud.pb.com
iam.pb.com
qa.inside2.pb.com
api.pb.com
BIUS-FORCS01.ssps-bi.nw.pb.com
hallshipping.sendsuite.pb.com
*.ecommerce.pb.com
developer.pb.com
dr.pb.com
vma.pb.com
dedc3-rinapqp2.pb.com
t3qacmtldc.pb.com
kuu802.d3.qa.pb.com
*.pb.com
DeutscheBank.SendSuite.PB.com
tdcec-lb15b.pb.com
myaccess.pb.com
laurel-vm.ssps-testing.ct.pb.com
kb.ecommerce.pb.com
usdc2-rdgappv01.pb.com
*.ecommerce.pb.com
mymail.pb.com
PBMD-EXE02.pb.com
*.ecommerce.pb.com
srmapp1.ct.pb.com
qa.teamsite.inside.pb.com
ukcometp8.pb.com
ng.ebpp.e2vault.pb.com
service.pb.com
incometp5.pb.com
imperva.com
*.pb.com
o365.mail.pb.com
USAPLUXAVAYACTI01.pb.com
frcometp7.pb.com
MAILTRACKING.PB.COM
www.pb.com
mwb2b.pb.com
srmdbciq2.ct.pb.com
tablet.sendpro.pb.com
PBKD-EXE02.pb.com
support.ecommerce.pb.com
soi.d3.pb.com
awds.pb.com
cim.pb.com
proactive.pb.com
USDC1-OPNET01.pb.com
rjd190.d3.qa.pb.com
sni.cloudflaressl.com
vma.pb.com
PBMD-EXC02.pb.com
mdcvcse1.video.pb.com
PBKD-EXC02.pb.com
www.pb.com
sncdbciq1.ct.pb.com
cryptotest1.ssps_develop.ct.pb.com
PBKD-EXE01.pb.com
*.mail360.pb.com
kdcec-lb19b.pb.com
tdcec-lb17a.pb.com
aws-epmprod.pb.com
*.pb.com
tdcec-lb19b.pb.com

Certificate

The complete raw certificate details for www.pb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ+zCCCOOgAwIBAgIQDAv5kG8Oe0Ybe0kiq/LejDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMjAxMDcwMDAwMDBaFw0yMjA4MTAyMzU5NTlaMGYxCzAJBgNVBAYTAlVTMRQw
EgYDVQQIEwtDb25uZWN0aWN1dDERMA8GA1UEBxMIU3RhbWZvcmQxGTAXBgNVBAoT
EFBpdG5leSBCb3dlcyBJbmMxEzARBgNVBAMTCnd3dy5wYi5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/i5uHhF5btEWmUiLrwCN672k3fVTUKx+
FfhwSlZJvctJIZ+UIv4npXyd6egiAN6/XSar5bqnrANudTxDRVWBULrG2e9MSo9h
SMIwHUsrP66Uepg4N0S7bi7P1H6c3p5F3FlpSsFrUH6vynjx1eUzjrwki84RCEYl
2XP35cGxTQhXLepyre8ZwjkJVZLFCVCjN1LDeNpwMuUogKijbye4ym0qemsE8H0d
efwB+uATspAOzvJUxsF/nGk7FDVQ3fs3TQHR4UzXQRZDzi6ge5rzGCHiEiCtpfeF
wulcM54SdgSavOqPgy+oRirPfz73aoetm6csjm0gToH+tO9kUYhpAgMBAAGjggar
MIIGpzAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU
nBjIdpyMWWJaz+tKOrB34PyQwvMwggOtBgNVHREEggOkMIIDoIISd3d3LnBpdG5l
eWJvd2VzLnVzghJ3d3cucGl0bmV5Ym93ZXMuc2WCEnd3dy5waXRuZXlib3dlcy5u
b4ISd3d3LnBpdG5leWJvd2VzLmllghJ3d3cucGl0bmV5Ym93ZXMuZnKCEnd3dy5w
aXRuZXlib3dlcy5kZYITd3d3LnBpdG5leWJvd2VzLmNvbYIVd3d3LnBpdG5leWJv
d2VzLmNvLnVrghJ3d3cucGl0bmV5Ym93ZXMuY2GCCnd3dy5wYi5jb22CF3d3dy5h
ZW0ucGl0bmV5Ym93ZXMuY29tghd0ZXN0LXBiZW5nYWdlb25lLnBiLmNvbYIXc3Vw
cG9ydC5waXRuZXlib3dlcy5jb22CDnN1cHBvcnQucGIuY29tgg1zdG9yZS5wYnVp
LnVzghJzdGdzbWIucGJtZXRlci5jb22CE3N0Zy5waXRuZXlib3dlcy5jb22CF3N0
Zy1uZXcucGl0bmV5Ym93ZXMuY29tghJzdGF0aWMuY2RuLnBidWkudXOCEHN0YWdl
Y2RuLnBidWkudXOCH3JkczAwMXRlc3QtcGJlbmdhZ2Vvbm9uZS5wYi5jb22CDHFh
LWNsLnBiLmNvbYIYcHJvZHRlc3QucGl0bmV5Ym93ZXMuY29tghJwcmVwcm9kY2Ru
LnBidWkudXOCF3ByZXByb2QucGl0bmV5Ym93ZXMuY29tghZwcmVwcm9kLnBpdG5l
eWJvd2VzLmNhgg5wcmVwcm9kLnBiLmNvbYIXcGl0bmV5Ym93ZXMtc3VwcG9ydC5j
b22CD3BidXBkYXRlLnBiLmNvbYIXcGJzdGFnZS5waXRuZXlib3dlcy5jb22CFnBi
c3RhZ2UucGl0bmV5Ym93ZXMuY2GCDnBic3RhZ2UucGIuY29tghVwYmVuZ2FnZW9u
ZWNzci5wYi5jb22CEnBiZW5nYWdlb25lLnBiLmNvbYINcGJjZG4ucGJ1aS51c4IZ
bXlhY2NvdW50LnBpdG5leWJvd2VzLmNvbYISbWFpbnRlbmFuY2UucGIuY29tghdp
bWFxYXdzLnBpdG5leWJvd2VzLmNvbYIWaW1hcWF3cy5waXRuZXlib3dlcy5jYYIO
aW1hcWF3cy5wYi5jb22CEWZyLnBpdG5leWJvd2VzLmNhghdmYWlsb3Zlci1wcmVw
cm9kLnBiLmNvbYIRZW4ucGl0bmV5Ym93ZXMuY2GCCWNsLnBiLmNvbYILY2RuLnBi
dWkudXMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9H
ZW9UcnVzdFJTQUNBMjAxOC5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggr
BgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHUGCCsGAQUFBwEB
BGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYI
KwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJT
QUNBMjAxOC5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIB
agFoAHcARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+bUcAAAF+NkEppQAA
BAMASDBGAiEAv4/OYY+dKjQdTqFof7rpkTAr5sFwOc9L4K/tgcbGNLwCIQC4i/6A
ciRj/lU1ooXHK8hKk7QpYxU82/6Rdcfs2OfKeAB1AFGjsPX9AXmcVm24N3iPDKR6
zBsny/eeiEKaDf7UiwXlAAABfjZBKZMAAAQDAEYwRAIgV54hOvMbaJbvAUZrBclW
ffHQVGzo473K4Sw1XJvik8oCIG7tP7LxAGQMWsPeYn/BaFk1teQpEmfJ7UhkQPUp
g0dOAHYAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAF+NkEpNAAA
BAMARzBFAiEA5q/N1oUZp0PCk32W/b9GjFmqgB5vfJtpqhgkoyJtGOQCIE5AUCzw
x/aw/3Io2bZ7LQd8W4JkOYCZ6oaJIgYtmzJmMA0GCSqGSIb3DQEBCwUAA4IBAQAx
UL7ip401DYDM4Cf2jFjnfNetJ7Yxunh4A6fekGp2C/sthIEjWyLwEp41epYW76j+
GHUrfBkORDzEntZB3w0NPMBaQfluWMtGOoxPQdsgqoTXVr7eb7wB3lGX5GTT6bo7
h2yCGgoc54hhURYs6gr1xw4WUYvo8zAa/q6B/TBOXXyShrDf9hu7bKH/OInS3i3o
ZluhWKr01d8ELiudMynKxbvROTn4fyU2nKrUMoju6IlH6c9vAqUjAbrk9InK2+uf
0osgr/ZuOXTBw7clSqH3SEQ9yEl2XZ828vTnjrRcVKSSmgYEa9fCOrMG6NctU8L5
SZMd86cSB4+IaohWriSf
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf4ubh4ReW7RFplIi68A
jeu9pN31U1CsfhX4cEpWSb3LSSGflCL+J6V8nenoIgDev10mq+W6p6wDbnU8Q0VV
gVC6xtnvTEqPYUjCMB1LKz+ulHqYODdEu24uz9R+nN6eRdxZaUrBa1B+r8p48dXl
M468JIvOEQhGJdlz9+XBsU0IVy3qcq3vGcI5CVWSxQlQozdSw3jacDLlKICoo28n
uMptKnprBPB9HXn8AfrgE7KQDs7yVMbBf5xpOxQ1UN37N00B0eFM10EWQ84uoHua
8xgh4hIgraX3hcLpXDOeEnYEmrzqj4MvqEYqz38+92qHrZunLI5tIE6B/rTvZFGI
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16012912978079928094733338956233105036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stamford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pitney Bowes Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23479427922704638659974459092344950999195109223705702755352961376082205720254635671837341657280434421877691538001758372370193701487726892769892623947343449359999497099817125894780667117155530322016339797605493560637192344985224230116602043648262069490704389105074624604119689763420211176669111825775373875056209618007491565945678126241372988230074468981790523812064187371442378083583042503353555894401208410295367652033900617428884997959156529724639001442083974183928765531116283254883424727792130417467730033316763073135444411526180492100303930571022802962918461188179899552110039563374990182787811155203073745455209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c18c8769c8c59625acfeb4a3ab077e0fc90c2f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (932 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitneybowes.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitneybowes.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitneybowes.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitneybowes.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitneybowes.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitneybowes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitneybowes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitneybowes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aem.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-pbengageone.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.pbui.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgsmb.pbmeter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-new.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.cdn.pbui.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagecdn.pbui.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rds001test-pbengageonone.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-cl.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodtest.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprodcdn.pbui.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.pitneybowes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitneybowes-support.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbupdate.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbstage.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbstage.pitneybowes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbstage.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbengageonecsr.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbengageone.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbcdn.pbui.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaqaws.pitneybowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaqaws.pitneybowes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaqaws.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.pitneybowes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover-preprod.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.pitneybowes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl.pb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pbui.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017e364129a50000040300483046022100bf8fce618f9d2a341d4ea1687fbae991302be6c17039cf4be0afed81c6c634bc022100b88bfe80722463fe5535a285c72bc84a93b42963153cdbfe9175c7ecd8e7ca7800750051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017e3641299300000403004630440220579e213af31b6896ef01466b05c9567df1d0546ce8e3bdcae12c355c9be293ca02206eed3fb2f100640c5ac3de627fc1685935b5e4291267c9ed486440f52983474e00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017e364129340000040300473045022100e6afcdd68519a743c2937d96fdbf468c59aa801e6f7c9b69aa1824a3226d18e402204e40502cf0c7f6b0ff7228d9b67b2d077c5b8264398099ea868922062d9b3266
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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