pay.usps.com

- United States Postal Service -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:ad:68:ba:77:43:6b:18:8b:a2:2a:b5:cc:7b:b1:a7 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United States Postal Service

Organization: United States Postal Service
State / Province: North Carolina
Locality: Morrisville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:ad:68:ba:77:43:6b:18:8b:a2:2a:b5:cc:7b:b1:a7
Serial Number (int): 11534215466753079534508534892334920103
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2b:29:35:6f:e6:d7:9a:88:5a:74:fc:88:74:4a:e8:62:43:40:af:73
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 69:91:85:f5:e6:28:9d:04:6a:a9:9f:f1:5d:00:66:da:7f:6f:06:3f
Fingerprint (sha256): 04:f3:30:f3:5a:59:6e:aa:25:c4:e4:57:14:5d:ac:68:d2:23:4c:ea:ae:fc:ca:3b:d4:90:ba:b2:d0:49:c3:ac

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate pay.usps.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pay.usps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pay.usps.com

Other certificates including the domain name usps.com

(limited to 100 certificates)
extrpt.usps.com
dev-reship.usps.com
eddmr-dr.usps.com
sdx-cat.usps.com
federation.usps.com
crosswalk.usps.com
fast-cat.usps.com

pfoiapal.usps.com
cid-prod.usps.com
pwim-sit.usps.com
mid-cat.usps.com
*.usps.com
rims-imdas-sit.usps.com
pdx-cat.usps.com
pi.usps.com
lcrs.usps.com
q-mnas2see.usps.com
ereassign.usps.com
iletms-cat.usps.com
idp.usps.com
crosswalk-cat.usps.com
lgis-dev.usps.com
internationalclaims.usps.com
ea-webtools.usps.com
gateway.usps.com
www.usps.com
rims-imdas-cat.usps.com
eeo-dev.usps.com
myusps.gov
news.usps.com
crosswalk-cat.usps.com

pay.usps.com
crosswalk-dev.usps.com
poboxes.usps.com
vrsi-841990001i.usps.com
mdxtem.usps.com
mdx.usps.com
ereassign.usps.com
mdxcat.usps.com
sphone-prd.usps.com
ivs-sign.usps.com
cat1a.usps.com
catpx-custreg.usps.com
cat-services.usps.com
dbcalc-cat.usps.com
cat-dp-secure-customertools.usps.com
clds.usps.com
cat-services.usps.com
customerpulse.usps.com
abrm-prod.usps.com
efile-cat.usps.com
mailtracking.usps.com
onlineclaims.usps.com
qiv.usps.com

rims.usps.com
apt.usps.com
ecom-dev.usps.com
programregistration.usps.com
crosswalk.usps.com


dev-retail-pi.usps.com
customerpulse.usps.com
*.usps.com
webivr-sit.usps.com
epay-sit.usps.com
reship.usps.com
origin-stage-reg.usps.com
fast-tem.usps.com
anchor.usps.com
programregistration-cat2.usps.com
origin-apis-cat2-sm.usps.com
returns.usps.com
www.uspspostalone.com
efile-cat.usps.com
stage-postalpro.usps.com
onlineclaims.usps.com
www.uspspostalone.com
omas.usps.com
mid-cat.usps.com
pfsc.usps.com
idp-test.usps.com
ssmap.usps.com
USPS
devpx-about.usps.com
stage-einvoice.usps.com
eddmr-sit.usps.com
usps.com
eddmr-cat.usps.com
federation-cat.usps.com
c360faq.usps.com
gopost.usps.com
mteor-cat.usps.com
lcrs.usps.com
crosswalk-cat.usps.com
*.usps.com
facts.usps.com

Certificate

The complete raw certificate details for pay.usps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vJUo65jlAtiqO1JwqdH
Fyfm+7JRDO4y1Vh6D4ImbWzFxkBsUqlvbSc4ZoVVryx6MqJbSaETjXsce0tm4rbQ
oJMs6QTCXS/Mx7GNNWes4mvRCDtKSR8R8viF6fQiQssV0lDRcWqPmwn9EvAITDZ6
g6/PlAIj2gdmxr4mjeIYWPnbNgfd0/xS98g1+af7bfY2+HkgIMkSLA0EefBLv6Os
1ZONlXk1qhNtwX8CIJBgnqFqt2fw7ZYuJ/8otzfNY9Zz36c7JtugCGnm45ODi//r
rC9Y5Lc+2kbmxmss89M6xBUabUSZOT35sSVosauJgAbtyhQjvXBch/dz0D2ZGah6
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11534215466753079534508534892334920103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Morrisville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Postal Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pay.usps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27134494946468933726832159766612588436459055605907041806035098850345499586283625663226325545275120972526381493255283251088078871966620300592380406414197950132677591670834277472124537452436227670836955247314845310982312545501950743585283226516406755881015225405926780572347846407688866374820991632456495728451691352321242694788211284599646528486110059460002628235915537770272083759219810041096347379046314215492362481947696633059061852858308581628349258477822976149596565539656274099164263687643283445301310197401841475806047454741253793798425119794590338089363750855690462089501327871705248057440350025474489390234359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b29356fe6d79a885a74fc88744ae8624340af73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.usps.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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