D5UsO9AHbG.dhl.com

- Deutsche Post AG -

Issued by DPDHL Global TLS CA - I4

About this certificate

This digital certificate with serial number 01:e2:03:d4:03:1d:32:85:9e:33:d4:eb:85:eb:b0:4f was issued on by Deutsche Post AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutsche Post AG

Organization: Deutsche Post AG
Organization unit: Aviation IT
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Deutsche Post AG

Organization: Deutsche Post AG
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:e2:03:d4:03:1d:32:85:9e:33:d4:eb:85:eb:b0:4f
Serial Number (int): 2502764730376803357376194831461363791
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2b:06:38:8a:66:73:88:60:95:0a:47:6a:7c:b0:a6:93:f0:4b:aa:17
AuthorityKeyId: 8e:3f:2e:a8:3c:a7:8d:2f:64:06:60:93:03:99:38:4b:09:86:3e:a3

Fingerprint (sha1): ab:73:35:39:16:f3:90:28:04:52:88:08:d0:48:6c:61:76:85:c0:a0
Fingerprint (sha256): 00:e8:a2:63:e0:ee:31:28:49:45:29:86:61:27:66:58:f2:62:25:6b:ba:01:c1:08:8d:81:2e:2d:f4:6e:d5:9b

Issuing Certificate URL: http://secure.globalsign.com/cacert/dhltlscai4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/dhltlscai4
CRL Distribution Point: http://crl.globalsign.com/ca/dhltlscai4.crl

Check the revocation status for certificate D5UsO9AHbG.dhl.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for D5UsO9AHbG.dhl.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

d5uso9ahbg.dhl.com

Other certificates including the domain name dhl.com

(limited to 100 certificates)
dsctmspptr4.dhl.com
san-10-s10.tlsprovisioning.exacttarget.com
ideahub.dhl.com
CalidusTMS.dhl.com
direct.dhl.com
fcp-backend.dhl.com
tm300i.dhl.com
gaitcitrix.dhl.com
tradeteamdeg.dhl.com
api.dhl.com
jdadlxp1.dhl.com
dhllink-apimgnt-qa.dhl.com
gbsdoxis.dhl.com
cz-wgp-syr.dhl.com
payments-mybill-uat.dhl.com
agente.dhl.com
iis.ecm.stars.dhl.com
docs.dhl.com
esolutions.dhl.com
confluence-test.dhl.com
parcelshop-ref.dhl.com
prgdclyaee01.dhl.com
dsc6stars-aca.dhl.com
flysmart.dhl.com
lots.dhl.com
dgf-elp.dhl.com
dsctmsr2.dhl.com
beta.dhl.com
netconnect-bluedart.dhl.com
packet.deutschepost.com
D5UsO9AHbG.dhl.com
test-api.freight-logistics.dhl.com
dcscbj.dhl.com
www.smartsensor-temperature-test.dhl.com
pp-meinservice-grax.dhl.com
csg.crest.dpwn.com
dci2.dhl.com
comuat.dhl.com
SPDP-ref.dhl.com
mits-ia4-ext.dhl.com
npts3test.dhl.com
www.dhltoolbox.se
V-DA-002.dhl.com
dhlexpress-myjob-api-test.dhl.com
external.customerreports.dhl.com
keyserver-lab.dhl.com
dcontest.dhl.com
imgit.dhl.com
test.gbs.dhl.com
*.datalake-dev.dhl.com
cyclone2-eu-prod.dhl.com
dpst.dhl.com
dci-dev.dhl.com
m.dhl.com
aux.dhl.com
webmail.dhl.com
dscotmllp05test.dhl.com
gatwickdirect.dhl.com
mailing.dhl.com
cvpn.dhl.com
reqit-dev.dhl.com
esecure-int.dhl.com
ryr.dhl.com
logistics.dhl
QA-tmsweb.dhl.com
apigbs.dhl.com
aviationmailsync.dhl.com
keurignj-6rivers-prod.dhl.com
czchoap0214.prg-dc.dhl.com
ADMSSCICERTWebService-temp.dhl.com
prgdclywse14.dhl.com
globalmaileurope.dhl.com
connectplus.dhl.com
kuldclyaee21.dhl.com
www.dhl.com
globalecom.dhl.com
cvpntest.dhl.com
back-eut.dhl.com
us-dsc-gvp-ac01.dhl.com
gsconnectcsm.dhl.com
isupply.dhl.com
irecprjb.dhl.com
dhlexpresspt.com
wsbexpressuat.dhl.com
amrta02app.dhl.com
servicenow-dev2.dhl.com
www.packstation.de
direct.dhl.com
fidgfcustomsdirectaccessprod.dhl.com
spl-test.dhl.com
onlineshipping.dhl.com
goarcbj1.dhl.com
czcholsint1661.prg-dc.dhl.com
portalemydhlplus.dhl.com
packaging.dhl.com
myaccount.dhl.com
mobilefleet-test.dhl.com
jupiter.dhl.com
mirror-bat.dhlec.dhl.com
cdex.dhl.com

Certificate

The complete raw certificate details for D5UsO9AHbG.dhl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2502764730376803357376194831461363791
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DPDHL Global TLS CA - I4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 14:19:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-28 14:18:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Aviation IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D5UsO9AHbG.dhl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841385156535186085373802220539045437896593273937356446585044597960777248209003386763264759015471472877937094304072743321224867979679588589197124906160784666624248992644211750813789816233494615558217513590553352189240507186922944831550110289117932757901117013932775539807319019369846001715171579011750552413759876424990893065152818712024016247032384979521270472303528765700137017759055426179494670548603958500939447490275711419042177064442606730360869898846998414707645741314947835014096408057873248075624107427608502827522427384881617083568937376673194512357787089172179142089186065113248667037802142543208445343510633369744530737291299111423274298193246669164775495931365833737939061861810060647632422065764095635792269295879123007084347216242243929534175061448255685954396242041621321500198901520056034456665433964850022059573189453513750531965253433988264623925837567260941630494808142532549308647584176953236914802916091312374218864752518314170416783837135723521767248048968279238318808340426595423363747695642997718027269390126713206606382108465192347165567018729320659299647905605323105463584394949696425606123468719948481342331751852284418891429828716926666190481230992840147674849464271070839843180929299512151899868570559999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd5uso9ahbg.dhl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b06388a66738860950a476a7cb0a693f04baa17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/dhltlscai4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/dhltlscai4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8e3f2ea83ca78d2f640660930399384b09863ea3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/dhltlscai4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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