okta-fmis-fed.cat.usps.gov
- United States Postal Service -
Issued by COMODO RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 95:e1:c9:c9:04:1f:14:71:b5:ab:6d:df:0d:f3:0c:bc was issued on by COMODO CA Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
United States Postal Service
Organization:
United States Postal Service
State / Province:
Minnesota
Country: US
Country: US
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): 95:e1:c9:c9:04:1f:14:71:b5:ab:6d:df:0d:f3:0c:bcSerial Number (int): 199227330855589313916569532403748637884
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 07:ba:c7:e5:71:1e:fa:8a:56:97:4e:cc:61:94:f4:f5:5e:f7:72:e0
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24
Fingerprint (sha1): 38:57:8c:af:5b:76:89:47:fd:a4:68:c0:c6:88:54:38:dd:41:e6:d2
Fingerprint (sha256): 10:90:d7:eb:66:db:ae:0f:33:5a:18:86:9b:c1:a1:f3:07:85:8c:b1:74:a2:ac:28:ea:01:71:05:a1:f7:c0:50
Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate okta-fmis-fed.cat.usps.gov
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for okta-fmis-fed.cat.usps.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
okta-fmis-fed.cat.usps.gov
www.okta-fmis-fed.cat.usps.gov
www.okta-fmis-fed.cat.usps.gov
Other certificates including the domain name usps.gov
(limited to 100 certificates)
SAMTCATWE106.usps.gov
policynet.usps.gov
apigee-hybrid.usps.gov
samsak.usps.gov
mimail365.usps.gov
crosswalk.usps.com
epf-dev.usps.gov
tpmtrans-cat.usps.gov
lecm-dev.usps.gov
webvpn.usps.gov
ws0-ext.usps.gov
*.usps.com
pidp-cat.usps.gov
ssp.usps.gov
hce-portal.usps.gov
flosum.usps.gov
inboundcrw.usps.gov
mienrollcat.usps.gov
ereassign.usps.com
samtcavcs118.usps.gov
crosswalk-cat.usps.com
usps.gov
ribbs-dev.usps.gov
wp0-ext.usps.gov
securemail.usps.gov
myusps.gov
crosswalk-cat.usps.com
vtc.usps.gov
crosswalk-dev.usps.com
usps-cmgeus01.usps.gov
aad-ecrms-fed-dev.usps.gov
aad-mra-fed-prod.usps.gov
okta-nofda-fed.prd.usps.gov
pgp.usps.gov
ereassign.usps.com
test.vpn.usps.gov
wc0-ext.usps.gov
ivs-sign.usps.com
meetingplace4-dmz.usps.gov
splunkdmz.usps.gov
cat-amd-int.usps.gov
qliteblue.usps.gov
dbcalc-cat.usps.com
miapp.usps.gov
aad-ecrms-fed-sit.usps.gov
misspcat.usps.gov
bpvpn.usps.gov
epayroll-dev.usps.gov
eopf.usps.gov
eagnmnvcs122.usps.gov
liteblue.usps.gov
samsak-cat.usps.gov
ssp.usps.gov
eaganras.usps.gov
ssp-cat-external.usps.gov
click.go.usps.gov
caps.usps.gov
samtca-ns-b2b.usps.gov
aad-ecrms-fed-sit.usps.gov
cloud.go.usps.gov
ssp-cat.usps.gov
xsp1.ipt-eaglab.usps.gov
crosswalk.usps.com
webpmt.usps.gov
sftraining.usps.gov
akamai-san192.exacttarget.com
usps-cmg-eus-01.usps.gov
eopf.usps.gov
anchor.usps.com
gk-w-email.srvs.usps.gov
wc0-ext.usps.gov
origin-apis-cat2-sm.usps.com
www.uspspostalone.com
uspsservicenowservices.usps.gov
okta-fmis-fed.cat.usps.gov
caps-cat.usps.gov
eopf.usps.gov
ribbs-cat.usps.gov
ipt-cfg.usps.gov
qamps.usps.gov
*.usps.gov
game.usps.gov
view.go.usps.gov
inboundcrw.usps.gov
UNITED STATES POSTAL SERVICE
qamps.usps.gov
meetingplace5-dmz2.usps.gov
game.usps.gov
sm-pci-ext-ns.usps.gov
crosswalk-cat.usps.com
hrkcm-kb.usps.gov
xsp1.ipt-eaglab.usps.gov
lgis-sit.usps.gov
sakcarrier.usps.gov
policynet.usps.gov
apigee-hybrid.usps.gov
samsak.usps.gov
mimail365.usps.gov
crosswalk.usps.com
epf-dev.usps.gov
tpmtrans-cat.usps.gov
lecm-dev.usps.gov
webvpn.usps.gov
ws0-ext.usps.gov
*.usps.com
pidp-cat.usps.gov
ssp.usps.gov
hce-portal.usps.gov
flosum.usps.gov
inboundcrw.usps.gov
mienrollcat.usps.gov
ereassign.usps.com
samtcavcs118.usps.gov
crosswalk-cat.usps.com
usps.gov
ribbs-dev.usps.gov
wp0-ext.usps.gov
securemail.usps.gov
myusps.gov
crosswalk-cat.usps.com
vtc.usps.gov
crosswalk-dev.usps.com
usps-cmgeus01.usps.gov
aad-ecrms-fed-dev.usps.gov
aad-mra-fed-prod.usps.gov
okta-nofda-fed.prd.usps.gov
pgp.usps.gov
ereassign.usps.com
test.vpn.usps.gov
wc0-ext.usps.gov
ivs-sign.usps.com
meetingplace4-dmz.usps.gov
splunkdmz.usps.gov
cat-amd-int.usps.gov
qliteblue.usps.gov
dbcalc-cat.usps.com
miapp.usps.gov
aad-ecrms-fed-sit.usps.gov
misspcat.usps.gov
bpvpn.usps.gov
epayroll-dev.usps.gov
eopf.usps.gov
eagnmnvcs122.usps.gov
liteblue.usps.gov
samsak-cat.usps.gov
ssp.usps.gov
eaganras.usps.gov
ssp-cat-external.usps.gov
click.go.usps.gov
caps.usps.gov
samtca-ns-b2b.usps.gov
aad-ecrms-fed-sit.usps.gov
cloud.go.usps.gov
ssp-cat.usps.gov
xsp1.ipt-eaglab.usps.gov
crosswalk.usps.com
webpmt.usps.gov
sftraining.usps.gov
akamai-san192.exacttarget.com
usps-cmg-eus-01.usps.gov
eopf.usps.gov
anchor.usps.com
gk-w-email.srvs.usps.gov
wc0-ext.usps.gov
origin-apis-cat2-sm.usps.com
www.uspspostalone.com
uspsservicenowservices.usps.gov
okta-fmis-fed.cat.usps.gov
caps-cat.usps.gov
eopf.usps.gov
ribbs-cat.usps.gov
ipt-cfg.usps.gov
qamps.usps.gov
*.usps.gov
game.usps.gov
view.go.usps.gov
inboundcrw.usps.gov
UNITED STATES POSTAL SERVICE
qamps.usps.gov
meetingplace5-dmz2.usps.gov
game.usps.gov
sm-pci-ext-ns.usps.gov
crosswalk-cat.usps.com
hrkcm-kb.usps.gov
xsp1.ipt-eaglab.usps.gov
lgis-sit.usps.gov
sakcarrier.usps.gov
Certificate
The complete raw certificate details for okta-fmis-fed.cat.usps.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgIRAJXhyckEHxRxtatt3w3zDLwwDQYJKoZIhvcNAQELBQAw gZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTwwOgYD VQQDEzNDT01PRE8gUlNBIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIFNlY3VyZSBT ZXJ2ZXIgQ0EwHhcNMjMxMDE3MDAwMDAwWhcNMjQxMDE2MjM1OTU5WjBtMQswCQYD VQQGEwJVUzESMBAGA1UECBMJTWlubmVzb3RhMSUwIwYDVQQKExxVbml0ZWQgU3Rh dGVzIFBvc3RhbCBTZXJ2aWNlMSMwIQYDVQQDExpva3RhLWZtaXMtZmVkLmNhdC51 c3BzLmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALdm0PWSpyGt 8lEI3S97dykPvLTTpBoKNEHNA7e4dBsyPFdc5XgvjEmdjrxlRgr1hxTnk4hnNi8A ZwAs9es5m3/Vq71IVD3bSuKYhYFK4G9/kvOrms+PTR6wWTk2PX1IfrZfR15MgScr M2GJ4xdKb9HOondQvgS+ksT2mA5OxF2VcYN1ZFNygBURrdVnw25cvSkhHIiJ8syl 7HRrRmJvECfhji8e40t8pdnMh4o9WFGn+UIkPeSSAItNfjd8a2dbS0nnMQhK77g1 g1NIShFpI5xxcjoiPSST59fffPfp9jl6N+LXTITNtDK+rxipcXsl0Tkkzzod/hm6 DTNcuIHhkKkCAwEAAaOCAhMwggIPMB8GA1UdIwQYMBaAFJrzK9rPrU+2L7sqSEgq ErcbQsEkMB0GA1UdDgQWBBQHusflcR76ilaXTsxhlPT1Xvdy4DAOBgNVHQ8BAf8E BAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwSgYDVR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0 cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuG SWh0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0NPTU9ET1JTQU9yZ2FuaXphdGlvblZh bGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYsGCCsGAQUFBwEBBH8wfTBVBggr BgEFBQcwAoZJaHR0cDovL2NydC5jb21vZG9jYS5jb20vQ09NT0RPUlNBT3JnYW5p emF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAkBggrBgEFBQcwAYYY aHR0cDovL29jc3AuY29tb2RvY2EuY29tMEUGA1UdEQQ+MDyCGm9rdGEtZm1pcy1m ZWQuY2F0LnVzcHMuZ292gh53d3cub2t0YS1mbWlzLWZlZC5jYXQudXNwcy5nb3Yw EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBACaRvioEvfUW F/EqFxyiMkY65lZOk1Sb7yzwz8546eVPsmTjZj2dYHF9LYqGal2eE999FPeueM8A mik8UFgrMZ69WT0qHp1f79DlI3YTvxBu7tDs5iD14ewk6jvU52tX3XeUTiJqUoXn WC3F5YquRCQ19rjRvNKMDyomVK/jelh6eaEMRwuQhYA7tj4FewzQ9dQTYp+Y7IdU 0bamvaKF71WqoIDipV0x3s9/pRBwJ3L4Oj8h4TSUTTjY5AWF3pvdU4LFcoqGa61u XnKEwkWBwn2P9/lA3d3QA7MEKGTDbpuIZGARD1CGyedK3N1PlLlaXYqg4iOnC/ge KZpHfm0obdU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2bQ9ZKnIa3yUQjdL3t3 KQ+8tNOkGgo0Qc0Dt7h0GzI8V1zleC+MSZ2OvGVGCvWHFOeTiGc2LwBnACz16zmb f9WrvUhUPdtK4piFgUrgb3+S86uaz49NHrBZOTY9fUh+tl9HXkyBJyszYYnjF0pv 0c6id1C+BL6SxPaYDk7EXZVxg3VkU3KAFRGt1WfDbly9KSEciInyzKXsdGtGYm8Q J+GOLx7jS3yl2cyHij1YUaf5QiQ95JIAi01+N3xrZ1tLSecxCErvuDWDU0hKEWkj nHFyOiI9JJPn19989+n2OXo34tdMhM20Mr6vGKlxeyXROSTPOh3+GboNM1y4geGQ qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 199227330855589313916569532403748637884 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Postal Service' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'okta-fmis-fed.cat.usps.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23152310389892222150176866749147170659442200366141443487198096813657658892555144011373184158402114131070453705098031908687987393547047922630342063950409974401212795170455739347597217781798512491648164164496641564454310923308440341054456647513293646451072859584525734749702934335517384478361880856042690823009675434487054256386619843566652031026910184386808691850459007261580294696628327589328141591455824973584784256921205819043233993774746655082312936464770878531877676775013690225118414489076963577362139670564419485845278247921668848536710471020133057285613980446767121218552496323651185259970648730738172161527977 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 07bac7e5711efa8a56974ecc6194f4f55ef772e0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okta-fmis-fed.cat.usps.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okta-fmis-fed.cat.usps.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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