wsbexpressuat.dhl.com

- Deutsche Post AG -

Issued by DPDHL Global TLS CA - I5

About this certificate

This digital certificate with serial number 01:38:42:a0:e3:ef:89:e7:7d:91:03:01:bc:0f:ec:1c was issued on by Deutsche Post AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutsche Post AG

Organization: Deutsche Post AG
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Deutsche Post AG

Organization: Deutsche Post AG
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:38:42:a0:e3:ef:89:e7:7d:91:03:01:bc:0f:ec:1c
Serial Number (int): 1621348005945391247430787914263424028
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 1e:87:4e:8a:4d:86:44:23:80:31:17:ed:5a:22:1f:38:6b:76:ee:cb
AuthorityKeyId: ef:5b:f4:4b:86:f9:d6:f9:3a:53:89:09:bc:20:8e:bc:1a:ca:22:60

Fingerprint (sha1): ef:55:8d:a6:0f:72:f8:02:ff:ea:97:50:67:ba:3a:48:b3:7b:bb:0e
Fingerprint (sha256): 02:66:fc:73:94:ff:6a:a2:e6:ae:be:67:79:6b:2f:c5:b2:da:56:f3:1a:7c:b6:c7:08:99:05:36:b7:d7:d0:9b

Issuing Certificate URL: http://secure.globalsign.com/cacert/dhltlscai5.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/dhltlscai5
CRL Distribution Point: http://crl.globalsign.com/ca/dhltlscai5.crl

Check the revocation status for certificate wsbexpressuat.dhl.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wsbexpressuat.dhl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

express-sandbox.api.dhl.com
wsbexpressuat.dhl.com

Other certificates including the domain name dhl.com

(limited to 100 certificates)
dsctmspptr4.dhl.com
san-10-s10.tlsprovisioning.exacttarget.com
ideahub.dhl.com
CalidusTMS.dhl.com
direct.dhl.com
fcp-backend.dhl.com
tm300i.dhl.com
gaitcitrix.dhl.com
tradeteamdeg.dhl.com
api.dhl.com
jdadlxp1.dhl.com
dhllink-apimgnt-qa.dhl.com
gbsdoxis.dhl.com
cz-wgp-syr.dhl.com
payments-mybill-uat.dhl.com
agente.dhl.com
iis.ecm.stars.dhl.com
docs.dhl.com
esolutions.dhl.com
confluence-test.dhl.com
parcelshop-ref.dhl.com
prgdclyaee01.dhl.com
dsc6stars-aca.dhl.com
flysmart.dhl.com
lots.dhl.com
dgf-elp.dhl.com
dsctmsr2.dhl.com
beta.dhl.com
netconnect-bluedart.dhl.com
packet.deutschepost.com
D5UsO9AHbG.dhl.com
test-api.freight-logistics.dhl.com
dcscbj.dhl.com
www.smartsensor-temperature-test.dhl.com
pp-meinservice-grax.dhl.com
csg.crest.dpwn.com
dci2.dhl.com
comuat.dhl.com
SPDP-ref.dhl.com
mits-ia4-ext.dhl.com
npts3test.dhl.com
www.dhltoolbox.se
V-DA-002.dhl.com
dhlexpress-myjob-api-test.dhl.com
external.customerreports.dhl.com
keyserver-lab.dhl.com
dcontest.dhl.com
imgit.dhl.com
test.gbs.dhl.com
*.datalake-dev.dhl.com
cyclone2-eu-prod.dhl.com
dpst.dhl.com
dci-dev.dhl.com
m.dhl.com
aux.dhl.com
webmail.dhl.com
dscotmllp05test.dhl.com
gatwickdirect.dhl.com
mailing.dhl.com
cvpn.dhl.com
reqit-dev.dhl.com
esecure-int.dhl.com
ryr.dhl.com
logistics.dhl
QA-tmsweb.dhl.com
apigbs.dhl.com
aviationmailsync.dhl.com
keurignj-6rivers-prod.dhl.com
czchoap0214.prg-dc.dhl.com
ADMSSCICERTWebService-temp.dhl.com
prgdclywse14.dhl.com
globalmaileurope.dhl.com
connectplus.dhl.com
kuldclyaee21.dhl.com
www.dhl.com
globalecom.dhl.com
cvpntest.dhl.com
back-eut.dhl.com
us-dsc-gvp-ac01.dhl.com
gsconnectcsm.dhl.com
isupply.dhl.com
irecprjb.dhl.com
dhlexpresspt.com
wsbexpressuat.dhl.com
amrta02app.dhl.com
servicenow-dev2.dhl.com
www.packstation.de
direct.dhl.com
fidgfcustomsdirectaccessprod.dhl.com
spl-test.dhl.com
onlineshipping.dhl.com
goarcbj1.dhl.com
czcholsint1661.prg-dc.dhl.com
portalemydhlplus.dhl.com
packaging.dhl.com
myaccount.dhl.com
mobilefleet-test.dhl.com
jupiter.dhl.com
mirror-bat.dhlec.dhl.com
cdex.dhl.com

Certificate

The complete raw certificate details for wsbexpressuat.dhl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4fe/82yV8qBA0ewzhGx
JQRUW7IzOMIrR7LQQChVjJnHsWWuRNPR7DIeEwNlX/jw6HOZ80bemWDQtIGRsk1y
glGDL8GuX62I50JCnSsFCNSWYh+SI0FoO6g38CBLkCc0jil40/9XAztgMTXq2n2T
twtGHW0tER9K8gmdA0wIhp02HWYhEbW5Mm/Y/eX5WGj4Oc6iVrWj/NTeoaX0wHG2
T+p8MxkhSGmZOAfmC0HU9GQyuP0k8OPp3LUhkWcd7hBGYg/iHnB97XMR61zwUtrb
YvKh41uQ6XxrVyZR7Zx3POYlYyeTa3T0U6Fd6ZvakoForreti7+kPo3bNu1u9tfE
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1621348005945391247430787914263424028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DPDHL Global TLS CA - I5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 13:05:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 13:04:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'wsbexpressuat.dhl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24683470000375112856373409304082190896230202099494222991389081224470061152892068118411206211265880610400147153618060858923156832147650512532884460710494561754454859181069939001510997458811046658642254322429248435364800292996447020771382564634949084322677148109524982759090647078750768483827275683089364505327792628448547083620659973604737577617515877647023261178839505419404312864895601004300313428883380532170984069347427122246012985813714638849882979523179693458984885832806049055154447816088175537926566096886751079252735338988781670716421900711498487585716752708197727299931062858855108935620527073999922356798609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'express-sandbox.api.dhl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsbexpressuat.dhl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e874e8a4d864423803117ed5a221f386b76eecb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/dhltlscai5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/dhltlscai5.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef5bf44b86f9d6f93a538909bc208ebc1aca2260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/dhltlscai5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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