ppc-reporting-cat.usps.com

- United States Postal Service -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 94:8f:35:08:18:e7:c8:bb:f8:b5:14:6e:88:12:36:9e was issued on by Sectigo Limited.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United States Postal Service

Organization: United States Postal Service
State / Province: Minnesota
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 94:8f:35:08:18:e7:c8:bb:f8:b5:14:6e:88:12:36:9e
Serial Number (int): 197469317436180173234092705307872605854
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2d:1f:7b:fa:e9:2b:80:74:eb:ac:8b:c3:4e:f9:d9:54:bc:a1:30:99
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 69:ed:5f:75:89:70:63:30:60:6b:de:4a:86:d4:7e:af:00:b0:4d:1d
Fingerprint (sha256): 09:fb:52:4e:4b:cd:15:51:f9:e8:e9:a5:ab:2b:8b:55:70:c1:2d:d6:0b:7f:06:64:5c:74:ed:f1:15:61:a5:81

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate ppc-reporting-cat.usps.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ppc-reporting-cat.usps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ppc-reporting-cat.usps.com
origin-stage-ppc-reporting-cat.usps.com
origin-stage-ppc-reporting-cat1.usps.com
origin-stage-ppc-reporting-cat2.usps.com
origin-stage-ppc-reporting-hip.usps.com
origin-stage-ppc-reporting-tem.usps.com
origin-stage-ppc-reporting-tem1.usps.com
origin-stage-ppc-reporting-tem2.usps.com
ppc-reporting-cat1.usps.com
ppc-reporting-cat2.usps.com
ppc-reporting-hip.usps.com
ppc-reporting-tem.usps.com
ppc-reporting-tem1.usps.com
ppc-reporting-tem2.usps.com

Other certificates including the domain name usps.com

(limited to 100 certificates)
extrpt.usps.com
gateway-cat.usps.com
dev-reship.usps.com
eddmr-dr.usps.com
sdx-cat.usps.com
federation.usps.com
crosswalk.usps.com
fast-cat.usps.com

pfoiapal.usps.com
cid-prod.usps.com
pwim-sit.usps.com
mid-cat.usps.com
*.usps.com
rims-imdas-sit.usps.com
pdx-cat.usps.com
cat-smip.usps.com
pi.usps.com
lcrs.usps.com
q-mnas2see.usps.com
ereassign.usps.com
iletms-cat.usps.com
idp.usps.com
crosswalk-cat.usps.com
lgis-dev.usps.com
internationalclaims.usps.com
ea-webtools.usps.com
gateway.usps.com
www.usps.com
rims-imdas-cat.usps.com
eeo-dev.usps.com
myusps.gov
news.usps.com
crosswalk-cat.usps.com

pay.usps.com
mgoint-cat.usps.com
crosswalk-dev.usps.com
poboxes.usps.com
vrsi-841990001i.usps.com
mdxtem.usps.com
mdx.usps.com
ereassign.usps.com
mdxcat.usps.com
sphone-prd.usps.com
ivs-sign.usps.com
cat1a.usps.com
catpx-custreg.usps.com
cat-services.usps.com
dbcalc-cat.usps.com
cat-dp-secure-customertools.usps.com
ssmap-cat.usps.com
clds.usps.com
cat-services.usps.com
customerpulse.usps.com
abrm-prod.usps.com
ppc-reporting-cat.usps.com
efile-cat.usps.com
mailtracking.usps.com
onlineclaims.usps.com
qiv.usps.com

rims.usps.com
apt.usps.com
ecom-dev.usps.com
ecom-cat.usps.com
programregistration.usps.com
crosswalk.usps.com
dev-gab.usps.com


dev-retail-pi.usps.com
customerpulse.usps.com
*.usps.com
webivr-sit.usps.com
epay-sit.usps.com
reship.usps.com
origin-stage-reg.usps.com
fast-tem.usps.com
federation-cat.usps.com
anchor.usps.com
programregistration-cat2.usps.com
origin-apis-cat2-sm.usps.com
returns.usps.com
www.uspspostalone.com
efile-cat.usps.com
stage-postalpro.usps.com
*.usps.com
onlineclaims.usps.com
sit-gopost.usps.com
www.uspspostalone.com
omas.usps.com
mid-cat.usps.com
pfsc.usps.com
idp-test.usps.com
ssmap.usps.com
USPS
devpx-about.usps.com
stage-einvoice.usps.com
rims-imdas-sit.usps.com

Certificate

The complete raw certificate details for ppc-reporting-cat.usps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaKBbRUQNg856t6DiD/H
WhujHsXaubE0m74C+R4xea6CSLSOy7CPmaAbg5gkDmizciY/pns0JE0uk8u14buW
wcdhzQB9ixYjfxK7dBfOHEAFdfF0OgDuRDyjNpsyXWe9E/8x1hdekccxRcE2AEhT
OvRaL8YJcNPdUWTmJbysPhM8sI502pM8sBwW0cQY0aYm9ZB5sHfUI7MqVn1TBE3J
t0EZ/trb9w0VasOfOwkjCzViIj9vZV1/R3gZ881Xu/PXrYLHZxzPeWnbd8Fv9tRR
06C7XJdJKyq2dAdFXESOPzW5DXK0sXPIKdW4u367KVos/V9MJTGc2FC8gDnoNaJV
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 197469317436180173234092705307872605854
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Postal Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ppc-reporting-cat.usps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24949080561885469168492179654408651907632581986672405902033223050172590081026607636895024214185365759796059121709589341408910105258729369328875105606340952705696471274836858764760631981840585679862040585059735242704256657288749274891998055665052571020546718724724847316097544215419936112941128950278297561803087454563129978676247905380902823090436124450596621360261670788472075038865106326819870145324121534946647066776749628366937825851350221782871310598656494205675825334279313492029537654315249797575762002444715665769007408547113579591883289155190308101382127721629991964168598897519792069854396448207259499124193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d1f7bfae92b8074ebac8bc34ef9d954bca13099
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (495 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppc-reporting-cat.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-stage-ppc-reporting-cat.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-stage-ppc-reporting-cat1.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-stage-ppc-reporting-cat2.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-stage-ppc-reporting-hip.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-stage-ppc-reporting-tem.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-stage-ppc-reporting-tem1.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-stage-ppc-reporting-tem2.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppc-reporting-cat1.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppc-reporting-cat2.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppc-reporting-hip.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppc-reporting-tem.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppc-reporting-tem1.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppc-reporting-tem2.usps.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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