RETITREF-A0001.deutschepost.dpwn.com

- Deutsche Post AG -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 58:35:97:8f:4d:4c:54:1d:6e:5c:01:30 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutsche Post AG

Organization: Deutsche Post AG
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 58:35:97:8f:4d:4c:54:1d:6e:5c:01:30
Serial Number (int): 27299469653511176575466078512
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: ad:38:9c:a1:43:a3:63:e1:0d:05:ef:6f:d0:d5:14:17:61:ae:b9:77
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 05:0e:93:c2:b4:78:85:cf:bb:88:e0:6e:d4:43:d8:96:09:80:02:65
Fingerprint (sha256): 36:6e:74:96:e2:a2:63:fe:39:09:5b:d8:e6:2b:34:17:f0:db:8c:af:79:fd:35:89:63:c7:19:ae:7f:be:90:4d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate RETITREF-A0001.deutschepost.dpwn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for RETITREF-A0001.deutschepost.dpwn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

RETITREF-A0001.deutschepost.dpwn.com

Other certificates including the domain name dpwn.com

(limited to 100 certificates)
prodws.deutschepost.de
csg.crest.dpwn.com
cig.dhl.de
sysm-essen01.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
www.dpwn.com
csg.crest.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
*.hasci-prod-cn.azure.deutschepost.de
webmail.dhl.com
webmail.dhl.com
RETITREF-A0001.deutschepost.dpwn.com
RETITREF-A0001.deutschepost.dpwn.com
dpc-personal.dpwn.com
gmpppref-w0001.deutschepost.dpwn.com
pstsr1-gpd.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
webmail.dhl.com
csg.crest.dpwn.com
cig.dhl.de
webshipping.dhl.com
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
pi-appswitch.deutschepost.de
wlea-a0007.deutschepost.dpwn.com
cig.dhl.de
pidemo-appswitch.deutschepost.de
cosmo.dpwn.com
scc-prod.deutschepost.dpwn.com
hapo-esi.intra.dpwn.net
csg.crest.dpwn.com
IZE-RG-A0002.deutschepost.dpwn.com
cosmo.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
cig.dhl.de
pi-appswitch.deutschepost.de
klf.dpwn.com
web.dpwn.com
www.dpwn.com
webmail.dhl.com
klf.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
web.dpwn.com
klf.dpwn.com
webmail.dhl.com
dhl-top.dp-dhl.com
ic-app.dpwn.com
prodws.deutschepost.de
csg.crest.dpwn.com
optra.deutschepost.de
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
piref-appswitch.deutschepost.de

Certificate

The complete raw certificate details for RETITREF-A0001.deutschepost.dpwn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27299469653511176575466078512
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-19 03:11:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-20 03:11:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RETITREF-A0001.deutschepost.dpwn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724862457211355844880927760770617594397003424364178469950057610295255573563603611623568272762958625720778621881686473760172065946374797081438346699104266373474040323126063633055514733940906094930538118830906350913819156461627887815003749899607182882132913455767460520523673352863483221274563715521256682391671624034725350866838266120519470682289613433965047523297884098077239921739300721803534292924852810855163833557636178043213472920606650041248887366905508560946989016655917233734140060982326234652616785222504552110289405559562256129325903128024870391183596878704588770301785964762368266633986033849131993685943133078536040141805916174257210823127304278229440357882213991707881919649036868253273904871779566751034142071361238399015977752464502424651769463178670609711916854097648319917887692293123463742070502376477158617701765380307039640543648532841482376890819947417722926140973487466402062725475574884084352861515094070051445587430973956463210760113834943947894806077070661311694617731719677740865479439406750922237633515365423431220893797193893917862561904464783769400026221147392836714851387409781811092745357642110011227653851417839809601547208361673056892322649251347930744800742878728244797773249873785437154210662614933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RETITREF-A0001.deutschepost.dpwn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad389ca143a363e10d05ef6fd0d5141761aeb977
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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