usdc1-bmrappv01.pb.com

- Pitney Bowes, Inc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:40:c0:3a:a6:c4:8d:cc:f9:cd:be:90:dd:da:e3:47 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Pitney Bowes, Inc

Organization: Pitney Bowes, Inc
State / Province: Connecticut
Locality: Danbury
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:40:c0:3a:a6:c4:8d:cc:f9:cd:be:90:dd:da:e3:47
Serial Number (int): 1665433864220602514980614321502610247
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 6e:0b:83:51:55:fe:b1:72:39:13:a2:2b:f6:e6:e0:f2:9d:f9:06:cd
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): c6:44:39:c8:10:26:a0:eb:52:fc:32:8d:53:ee:f2:97:1c:ee:20:14
Fingerprint (sha256): 01:37:30:42:48:00:91:cc:57:8a:c3:71:89:6e:79:6f:1e:11:b0:a5:e1:23:77:06:53:6c:c9:0c:d9:35:f6:20

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate usdc1-bmrappv01.pb.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usdc1-bmrappv01.pb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

usdc1-bmrappv01.pb.com

Other certificates including the domain name pb.com

(limited to 100 certificates)
cometservmdck.pb.com
gpr.pb.com
www.pb.com
srmappp1.ct.pb.com
cometservldck.pb.com
tps414.d3.qa.pb.com
imperva.com
*.sl.pb.com
eccappq1.ct.pb.com
*.pb.com
qa.inside2.pb.com
usdc1-bmrappv01.pb.com
syk665.d3.qa.pb.com
grcdbcip1.ct.pb.com
cryptotest1.ssps_develop.ct.pb.com
sf.d3.qa.pb.com
zazzle.pb.com
Ludwig.ssps_develop.ct.pb.com
support.ecommerce.pb.com
ukcometlb22.pb.com
rates.sendpro.pb.com
imperva.com
anzcomettest.t3cloud.pb.com
isend.sys.pb.com
pbkdexe.pb.com
brcomet1.pb.com
cmtservpre2-ext.test.pb.com
teamsite.inside.pb.com
Citrix.Sendsuite.pb.com
Decometlb7.pb.com
qa.teamsite.inside.pb.com
*.test.pb.com
tds.d3.pb.com
www.pb.com
client.pitneybowes.com
sbo101.d3.qa.pb.com
remote1.pb.com
PBMD-EXE02.pb.com
nexpose.pscloud.pb.com
iam.pb.com
qa.inside2.pb.com
api.pb.com
BIUS-FORCS01.ssps-bi.nw.pb.com
hallshipping.sendsuite.pb.com
*.ecommerce.pb.com
developer.pb.com
dr.pb.com
vma.pb.com
dedc3-rinapqp2.pb.com
t3qacmtldc.pb.com
kuu802.d3.qa.pb.com
*.pb.com
DeutscheBank.SendSuite.PB.com
*.api.jp.pb.com
tdcec-lb15b.pb.com
myaccess.pb.com
laurel-vm.ssps-testing.ct.pb.com
kb.ecommerce.pb.com
usdc2-rdgappv01.pb.com
*.ecommerce.pb.com
mymail.pb.com
PBMD-EXE02.pb.com
*.ecommerce.pb.com
srmapp1.ct.pb.com
qa.teamsite.inside.pb.com
ukcometp8.pb.com
ng.ebpp.e2vault.pb.com
service.pb.com
incometp5.pb.com
imperva.com
*.pb.com
o365.mail.pb.com
USAPLUXAVAYACTI01.pb.com
frcometp7.pb.com
MAILTRACKING.PB.COM
www.pb.com
mwb2b.pb.com
srmdbciq2.ct.pb.com
tablet.sendpro.pb.com
PBKD-EXE02.pb.com
support.ecommerce.pb.com
soi.d3.pb.com
awds.pb.com
cim.pb.com
proactive.pb.com
USDC1-OPNET01.pb.com
rjd190.d3.qa.pb.com
sni.cloudflaressl.com
vma.pb.com
PBMD-EXC02.pb.com
mdcvcse1.video.pb.com
PBKD-EXC02.pb.com
www.pb.com
sncdbciq1.ct.pb.com
cryptotest1.ssps_develop.ct.pb.com
PBKD-EXE01.pb.com
*.mail360.pb.com
kdcec-lb19b.pb.com
tdcec-lb17a.pb.com
aws-epmprod.pb.com

Certificate

The complete raw certificate details for usdc1-bmrappv01.pb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VZKRBNkTNjrqgqEwX4n
1UKzSv5CeqVhjKP3jZALy29na1Ycbm0ZozRxvqxyT+uUFIIbatSyUGaYuGc/Ji8+
s72e9hVJnY22nO4L95BNd3i2Js3UtTB8xtf4sG/C9ZjMkHsy7IrRhj8lPLFv6zh+
8r+a9P4lXsaWKL7hVOKWuhTO18hx5MIe5vLG9jP+TLXbnSSczTy2qVRHFlGa/dmD
TyGjqoICtcNkxXAW28d2jaot12iB0foXGTHaoU19pL8iOFOh0clF47Q2uxVwcLtD
ML6Qm/60z2NmXl19htbFIcDkN2eIezfnUtuMMhxK8zXT/ehpJhviWjlUv1OgO51V
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1665433864220602514980614321502610247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Danbury'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pitney Bowes, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usdc1-bmrappv01.pb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26426356972740592247133470001552551920066380718681380680680417670160885152718854973036295603624166256863875675164905319446063574558167668271952149582867544409420563650668794876818120180483896434183970237558204059374306184315116727453288032273762968281586530389619096852520670444878481101385917705803972242558456058422747374713538820496264825860433992507146796431191265788680842092792280319480880006392439294246636812322608915260509102731186820719995571962200991273905208851181766463191704088355140536158907886464768263078572068161902106314832006731956936969219241308528979298549868918899351075669468017251064401974611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e0b835155feb1723913a22bf6e6e0f29df906cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdc1-bmrappv01.pb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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