cat-services.usps.com

- United States Postal Service -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 93:2d:b3:28:a7:3a:63:c1:bf:fc:78:da:fc:67:01:b6 was issued on by COMODO CA Limited.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United States Postal Service

Organization: United States Postal Service
Organization unit: SOA
Organization unit: Hosted by United States Postal Service
Organization unit: Unified Communications
Address: 2825 Lone Oak Parkway
Postal code: 55121
State / Province: MN
Locality: Eagan
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 93:2d:b3:28:a7:3a:63:c1:bf:fc:78:da:fc:67:01:b6
Serial Number (int): 195633802511216840205762650823062913462
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 84:89:3e:91:d5:aa:c3:60:be:8c:19:c6:88:c2:b9:25:0a:19:80:ac
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 9d:e8:58:d1:c2:cb:c8:77:59:43:85:b8:33:99:bb:8d:c1:42:c5:d9
Fingerprint (sha256): 09:9f:87:99:af:88:e1:ba:5d:41:8e:91:26:15:17:67:1c:b4:71:c7:ea:d5:31:41:a7:f4:0f:a1:03:13:df:8e

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate cat-services.usps.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cat-services.usps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cat-services.usps.com
cat-ems.usps.com
cat-services-dsign.usps.com
origin-cat-services.usps.com

Other certificates including the domain name usps.com

(limited to 100 certificates)
extrpt.usps.com
dev-reship.usps.com
eddmr-dr.usps.com
sdx-cat.usps.com
federation.usps.com
crosswalk.usps.com
fast-cat.usps.com

pfoiapal.usps.com
cid-prod.usps.com
pwim-sit.usps.com
mid-cat.usps.com
*.usps.com
rims-imdas-sit.usps.com
pdx-cat.usps.com
pi.usps.com
lcrs.usps.com
q-mnas2see.usps.com
ereassign.usps.com
iletms-cat.usps.com
idp.usps.com
crosswalk-cat.usps.com
lgis-dev.usps.com
internationalclaims.usps.com
ea-webtools.usps.com
gateway.usps.com
www.usps.com
rims-imdas-cat.usps.com
eeo-dev.usps.com
myusps.gov
news.usps.com
crosswalk-cat.usps.com

pay.usps.com
crosswalk-dev.usps.com
poboxes.usps.com
vrsi-841990001i.usps.com
mdxtem.usps.com
mdx.usps.com
ereassign.usps.com
mdxcat.usps.com
sphone-prd.usps.com
ivs-sign.usps.com
cat1a.usps.com
catpx-custreg.usps.com
cat-services.usps.com
dbcalc-cat.usps.com
cat-dp-secure-customertools.usps.com
clds.usps.com
cat-services.usps.com
customerpulse.usps.com
abrm-prod.usps.com
efile-cat.usps.com
mailtracking.usps.com
onlineclaims.usps.com
qiv.usps.com

rims.usps.com
apt.usps.com
ecom-dev.usps.com
programregistration.usps.com
crosswalk.usps.com


dev-retail-pi.usps.com
customerpulse.usps.com
*.usps.com
webivr-sit.usps.com
epay-sit.usps.com
reship.usps.com
origin-stage-reg.usps.com
fast-tem.usps.com
anchor.usps.com
programregistration-cat2.usps.com
origin-apis-cat2-sm.usps.com
returns.usps.com
www.uspspostalone.com
efile-cat.usps.com
stage-postalpro.usps.com
onlineclaims.usps.com
www.uspspostalone.com
omas.usps.com
mid-cat.usps.com
pfsc.usps.com
idp-test.usps.com
ssmap.usps.com
USPS
devpx-about.usps.com
stage-einvoice.usps.com
eddmr-sit.usps.com
usps.com
eddmr-cat.usps.com
federation-cat.usps.com
c360faq.usps.com
gopost.usps.com
mteor-cat.usps.com
lcrs.usps.com
crosswalk-cat.usps.com
*.usps.com
facts.usps.com

Certificate

The complete raw certificate details for cat-services.usps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjL+VaRQpae1is9NOdpB
lTS/p8Y9MYM0cZJkY5piXnwhlQvD4VQ/sRZmfRKceqlsMfSiRCo8hQiDCe14tliC
dCJGj1k9Ht4VtKzBdjqJ5+0vi/VMwp9o2bHWjdHPgvDQRvDlis9r3t/k3fEJW36T
VMyoI3FdgBBy6fY9r95XbfIOUhgKXGv1p4AM8XiwT/7gTEvS5sWUWI6lhSIieaUQ
jN07nTtCVuzwHo1xDzGXlwueNHTSMDtTehpVw9pjRCWUsj4aWDeSKKgw6oWKnziv
CupOPo6u1JrOJlkwqwj6rW0epOAhHdEW0E3pQj2C2plAc54aZXeL5tURdJzFfd1v
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 195633802511216840205762650823062913462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55121'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eagan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2825 Lone Oak Parkway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Postal Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by United States Postal Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cat-services.usps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22495564113191221423382910966092782525819048438288183070313494357339483566299098749569180482154047935428233154340842800510751099867839207682830962044139004389163959341955963813751661567482544187548474813321561784383205833709989137136473644731187079122630172848755573514093001951175157479659984245830797114396703453808948083259781033469336759844924136040058638896295505530121935741734893490479580047825736706553251835606214442858967900928339734501232083280634072223462663473093957469942670099317271204260582928946274522593946846397439152803127755555697096876901831843550808439574332921959989587579260227634489770995571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84893e91d5aac360be8c19c688c2b9250a1980ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cat-services.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cat-ems.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cat-services-dsign.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-cat-services.usps.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000164d7bae63c0000040300473045022100ac64992503c9ce3f879a8f8508dc0790fee314a3ec18f019fa522ed48eadee1102202785b0e62e8a8224f57b4af2f4d9606c44c1d638e3d48207526dda786055ec17007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000164d7bae6820000040300473045022100b8a7dfd0742ebb8ef881182b3bbc6e43496309a9519e842413385cd20f4ed6d40220513cc860a18fc7901ed58ed731982fdd73840253ad1fbb2f6bb833b45e6ba320
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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