preprod.uspspostalone.com
- United States Postal Service -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number c7:fa:c8:7c:4f:ca:b2:00:cc:1a:d9:c7:d2:42:aa:72 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
United States Postal Service
Organization:
United States Postal Service
Organization unit: ECS Middleware
Organization unit: ECS Middleware
Address:
2825 Lone Oak Parkway
Postal code: 55121
State / Province: Minnesota
Locality: Eagan
Country: US
Postal code: 55121
State / Province: Minnesota
Locality: Eagan
Country: US
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): c7:fa:c8:7c:4f:ca:b2:00:cc:1a:d9:c7:d2:42:aa:72Serial Number (int): 265818511706739207105242553432578108018
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: d7:53:a4:16:fd:db:8e:64:e2:92:78:8f:be:d7:e5:48:38:ff:24:9a
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): d0:73:67:3e:fb:ba:f3:db:4a:b4:21:ca:43:56:44:d5:80:a7:de:7a
Fingerprint (sha256): 39:c4:d2:31:2c:3e:7a:c3:c9:86:b8:a0:43:45:95:60:35:2f:7f:64:49:e9:80:63:2d:a2:57:4d:40:3e:1f:99
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate preprod.uspspostalone.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for preprod.uspspostalone.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
preprod.uspspostalone.com
preprod.usps.com
preprod.usps.com
Other certificates including the domain name uspspostalone.com
(limited to 100 certificates)
myusps.gov
cat1a.usps.com
www.uspspostalone.com
*.keepingposted.org
www.uspspostalone.com
www.uspspostalone.com
tem1a.usps.com
mailxmltem.uspspostalone.com
tem1a.usps.com
cat1a.usps.com
fast.uspspostalone.com
prod1a.usps.com
cat1a.usps.com
www.uspspostalone.com
www.uspspostalone.com
preprod.uspspostalone.com
UNITED STATES POSTAL SERVICES IT
*.keepingposted.org
prod1a.usps.com
prod1a.usps.com
prod1a.usps.com
www.uspspostalone.com
fast.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
cat1a.usps.com
preprod.uspspostalone.com
www.uspspostalone.com
cat1a.usps.com
tem1a.usps.com
www.uspspostalone.com
upload9.uspspostalone.com
www.uspspostalone.com
UNITED STATES POSTAL SERVICES IT
cat1a.usps.com
www.uspspostalone.com
preprod.usps.com
preprod.uspspostalone.com
cat1a.usps.com
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
preprod.uspspostalone.com
*.keepingposted.org
www.uspspostalone.com
www.uspspostalone.com
preprod.usps.com
www.uspspostalone.com
myusps.gov
myusps.gov
upload1.uspspostalone.com
www.uspspostalone.com
tem1a.usps.com
fast.uspspostalone.com
www.uspspostalone.com
cat1a.usps.com
prod1.uspspostalone.com
preprod.usps.com
cat1a.usps.com
myusps.gov
www.uspspostalone.com
cat1a.usps.com
www.uspspostalone.com
www.uspspostalone.com
fast.uspspostalone.com
*.keepingposted.org
tem1a.usps.com
myusps.gov
www.uspspostalone.com
www.uspspostalone.com
myusps.gov
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
fast.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
cat1a.usps.com
www.uspspostalone.com
*.keepingposted.org
www.uspspostalone.com
www.uspspostalone.com
tem1a.usps.com
mailxmltem.uspspostalone.com
tem1a.usps.com
cat1a.usps.com
fast.uspspostalone.com
prod1a.usps.com
cat1a.usps.com
www.uspspostalone.com
www.uspspostalone.com
preprod.uspspostalone.com
UNITED STATES POSTAL SERVICES IT
*.keepingposted.org
prod1a.usps.com
prod1a.usps.com
prod1a.usps.com
www.uspspostalone.com
fast.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
cat1a.usps.com
preprod.uspspostalone.com
www.uspspostalone.com
cat1a.usps.com
tem1a.usps.com
www.uspspostalone.com
upload9.uspspostalone.com
www.uspspostalone.com
UNITED STATES POSTAL SERVICES IT
cat1a.usps.com
www.uspspostalone.com
preprod.usps.com
preprod.uspspostalone.com
cat1a.usps.com
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
preprod.uspspostalone.com
*.keepingposted.org
www.uspspostalone.com
www.uspspostalone.com
preprod.usps.com
www.uspspostalone.com
myusps.gov
myusps.gov
upload1.uspspostalone.com
www.uspspostalone.com
tem1a.usps.com
fast.uspspostalone.com
www.uspspostalone.com
cat1a.usps.com
prod1.uspspostalone.com
preprod.usps.com
cat1a.usps.com
myusps.gov
www.uspspostalone.com
cat1a.usps.com
www.uspspostalone.com
www.uspspostalone.com
fast.uspspostalone.com
*.keepingposted.org
tem1a.usps.com
myusps.gov
www.uspspostalone.com
www.uspspostalone.com
myusps.gov
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
fast.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
Certificate
The complete raw certificate details for preprod.uspspostalone.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG4DCCBcigAwIBAgIRAMf6yHxPyrIAzBrZx9JCqnIwDQYJKoZIhvcNAQELBQAw gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl cnZlciBDQTAeFw0yMDAxMDgwMDAwMDBaFw0yMTAxMDcyMzU5NTlaMIHFMQswCQYD VQQGEwJVUzEOMAwGA1UEERMFNTUxMjExEjAQBgNVBAgTCU1pbm5lc290YTEOMAwG A1UEBxMFRWFnYW4xHjAcBgNVBAkTFTI4MjUgTG9uZSBPYWsgUGFya3dheTElMCMG A1UEChMcVW5pdGVkIFN0YXRlcyBQb3N0YWwgU2VydmljZTEXMBUGA1UECxMORUNT IE1pZGRsZXdhcmUxIjAgBgNVBAMTGXByZXByb2QudXNwc3Bvc3RhbG9uZS5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0As9n6GMH01R/d5HPUYB xP7TRAtYlUu90seV8l0OfAb5dFof08oCe1zehRCPOspF3ZEMwkXbSjAAEtgzu3M5 TWcb6QT2Po3jUslsfbqXQkueX57shZdKoYih0o/1rZ+znx30+/Wm2hLuywhFdp45 1zn2Wo6vsqxzdidhQpzk7JQl23cooTH3ICQot+aHaHSY3iKkjUDXaCJ4vwnNB3bY +J/WvY5cJk+0EPBLSXqtsdUUuLAeK3Nfd6Iq8Pop8NXKtdAUBPVtFyuYWpugT7qp MtNSVPJgHUWjKosY5MSyY31Yzqpd+ki40LixYMgSBE75gSoeFP1I6n0pCohFgyeJ AgMBAAGjggL3MIIC8zAfBgNVHSMEGDAWgBQX2dYlJ2f5McJJQ9kwNkSMbKlP6zAd BgNVHQ4EFgQU11OkFv3bjmTikniPvtflSDj/JJowDgYDVR0PAQH/BAQDAgWgMAwG A1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEoGA1Ud IARDMEEwNQYMKwYBBAGyMQECAQMEMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2Vj dGlnby5jb20vQ1BTMAgGBmeBDAECAjBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8v Y3JsLnNlY3RpZ28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9u U2VjdXJlU2VydmVyQ0EuY3JsMIGKBggrBgEFBQcBAQR+MHwwVQYIKwYBBQUHMAKG SWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZh bGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9v Y3NwLnNlY3RpZ28uY29tMDYGA1UdEQQvMC2CGXByZXByb2QudXNwc3Bvc3RhbG9u ZS5jb22CEHByZXByb2QudXNwcy5jb20wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA dgB9PvL4j/+IVWgkwsDKnlKJeSvFDngJfy5ql2iZfiLw1wAAAW+F1Y7vAAAEAwBH MEUCICAraO3yBo1229gFo+UYKkt827RupprOaB4TsMhuVDjcAiEAyOtS5UNBtis6 NpO68kCtEhamqREvSyRsdsVj6EMr5S0AdwBElGUusO7Or8RAB9io/ijA2uaCvtjL MbU/0zOWtbaBqAAAAW+F1Y7VAAAEAwBIMEYCIQCmoxeL528WwJx3cEaVsiobV8wF aBMswlnyBrpOzW78GAIhAKi7JyFIahL9gJzfcL1H4oZjTbbiEafuxiNOAyG7axHC MA0GCSqGSIb3DQEBCwUAA4IBAQCPefMMuwT6aX05iiptFae95xAg3Hro+aN//aDs Ajl1mppQPZGQsAyDEKsrDYsA0MjdBz1ZnucclXXqxVpzmC7jJK57HKy1qu0eHEEM W89AVlR4/OpraxOEFYUwvl8yhXJetffe4jjOlwblqyHOLlEahgHxJvtf1dmJru1T o5bJ1BtzrqMfQU985ksqHJnlVxYxYBls8ujE29pB/7WbLPqxHGbR4Y230A/qmDLd fYalb0+7j5ok1tznHOfbnwZS3JhnbkzYzOiHuhMLeljvda+qyNnhITRia+GzDQEm fKYXlQJltKXvPWEbEfB1/MZw02sNMmAg45iBncckacZ8c5hd -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NALPZ+hjB9NUf3eRz1G AcT+00QLWJVLvdLHlfJdDnwG+XRaH9PKAntc3oUQjzrKRd2RDMJF20owABLYM7tz OU1nG+kE9j6N41LJbH26l0JLnl+e7IWXSqGIodKP9a2fs58d9Pv1ptoS7ssIRXae Odc59lqOr7Ksc3YnYUKc5OyUJdt3KKEx9yAkKLfmh2h0mN4ipI1A12gieL8JzQd2 2Pif1r2OXCZPtBDwS0l6rbHVFLiwHitzX3eiKvD6KfDVyrXQFAT1bRcrmFqboE+6 qTLTUlTyYB1FoyqLGOTEsmN9WM6qXfpIuNC4sWDIEgRO+YEqHhT9SOp9KQqIRYMn iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 265818511706739207105242553432578108018 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55121' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eagan' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2825 Lone Oak Parkway' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Postal Service' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ECS Middleware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'preprod.uspspostalone.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26865110927949336209464281773921994412889003915857365589227116781673270909011757477075418025808620843991933244816644938794325353459706920620056665125225543350260828662299525900625109194318923872665619893783874903506580329798486043684407027026258629807222159939014798725008480958248354972346749875352499052410575631924453517390326794563592418489700903435343939063544810179815379953771111921939478897311909684793143236994171889138303240268268359407964668805915856797602569720405776656117306782211547805292572623567485299344945220792447219228761377012772853356777367176075792792899335370097701433304422246214803275327369 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d753a416fddb8e64e292788fbed7e54838ff249a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.uspspostalone.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.usps.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000016f85d58eef00000403004730450220202b68edf2068d76dbd805a3e5182a4b7cdbb46ea69ace681e13b0c86e5438dc022100c8eb52e54341b62b3a3693baf240ad1216a6a9112f4b246c76c563e8432be52d0077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016f85d58ed50000040300483046022100a6a3178be76f16c09c77704695b22a1b57cc0568132cc259f206ba4ecd6efc18022100a8bb2721486a12fd809cdf70bd47e286634db6e211a7eec6234e0321bb6b11c2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008f79f30cbb04fa697d398a2a6d15a7bde71020dc7ae8f9a37ffda0ec0239759a9a503d9190b00c8310ab2b0d8b00d0c8dd073d599ee71c9575eac55a73982ee324ae7b1cacb5aaed1e1c410c5bcf40565478fcea6b6b1384158530be5f3285725eb5f7dee238ce9706e5ab21ce2e511a8601f126fb5fd5d989aeed53a396c9d41b73aea31f414f7ce64b2a1c99e557163160196cf2e8c4dbda41ffb59b2cfab11c66d1e18db7d00fea9832dd7d86a56f4fbb8f9a24d6dce71ce7db9f0652dc98676e4cd8cce887ba130b7a58ef75afaac8d9e12134626be1b30d01267ca617950265b4a5ef3d611b11f075fcc670d36b0d326020e398819dc72469c67c73985d