api.deutschepost.com

- Deutsche Post AG -

Issued by DPDHL Global TLS CA - I5

About this certificate

This digital certificate with serial number 01:4c:f0:5d:79:e6:06:16:30:be:a0:02:4e:6b:4d:0f was issued on by Deutsche Post AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutsche Post AG

Organization: Deutsche Post AG
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Deutsche Post AG

Organization: Deutsche Post AG
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:4c:f0:5d:79:e6:06:16:30:be:a0:02:4e:6b:4d:0f
Serial Number (int): 1728717741283320870591073877721042191
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 4a:0f:96:1a:22:6a:f1:79:04:07:6f:7a:e9:9d:eb:2f:fa:db:c3:85
AuthorityKeyId: ef:5b:f4:4b:86:f9:d6:f9:3a:53:89:09:bc:20:8e:bc:1a:ca:22:60

Fingerprint (sha1): 7f:9e:e0:2e:e8:e4:c6:b2:84:6f:d0:20:3c:93:95:68:ff:55:4f:b8
Fingerprint (sha256): 45:9e:62:2c:f4:47:ed:bb:41:64:92:a0:d6:3f:55:37:7b:14:ab:7b:5a:80:9a:2d:72:9d:52:65:96:eb:b7:57

Issuing Certificate URL: http://secure.globalsign.com/cacert/dhltlscai5.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/dhltlscai5
CRL Distribution Point: http://crl.globalsign.com/ca/dhltlscai5.crl

Check the revocation status for certificate api.deutschepost.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.deutschepost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.deutschepost.com
apidhlecommerce-qa.dhl.com
api-qa.deutschepost.com

Other certificates including the domain name deutschepost.com

(limited to 100 certificates)
packet.deutschepost.com
www.packet.deutschepost.com
www.deutschepost.de
api.deutschepost.com
www.packet.deutschepost.com
api.deutschepost.com
dhl.de
gmppp-testpacket.dhl.com
magazine.deutschepost.com
packet.deutschepost.com
www.deutschepost.de
www.deutschepost.de
www.deutschepost.de
www.packet.deutschepost.com
api-qa.deutschepost.com
magazine.deutschepost.com
dev-dp.tcb.deutschepost.de
packet.dhl.com
dhl.de
api-qa.dhlecommerce.com
gmpppref-w0001.deutschepost.dpwn.com
magazine.deutschepost.com
packet.deutschepost.com
api.deutschepost.com
api.dhlecommerce.com
magazine.deutschepost.com
dhl.de
magazine.deutschepost.com
www.deutschepost.com
www.packet.deutschepost.com
www.deutschepost.de
api-qa.dhlecommerce.com
dhl.de
packet.dhl.com
www.packet.deutschepost.com
www.packet.deutschepost.com
magazine.deutschepost.com
api-tcb.deutschepost.com
api-qa.dhlecommerce.com
gmppp-packet.dhl.com
www.deutschepost.de
packet.deutschepost.com
dhl.de
www.deutschepost.de
www.deutschepost.de
www.packet.deutschepost.com
www.deutschepost.de
dhl.de
magazine.deutschepost.com
packet.deutschepost.com
magazine.deutschepost.com
www.deutschepost.de
api.deutschepost.com
magazine.deutschepost.com
dhl.de
www.deutschepost.de
www.dhl.de
www.deutschepost.de
www.deutschepost.de
api-qa.dhlecommerce.com
magazine.deutschepost.com
dhl.de
api.dhlecommerce.com
api-prod-tmp.deutschepost.com
testpacket.deutschepost.com
packet.dhl.com
api-qa.dhlecommerce.com
www.deutschepost.com
api-qa.dhlecommerce.com
magazine.deutschepost.com
packet.deutschepost.com
www.deutschepost.de
api.dhlecommerce.com
www.packet.deutschepost.com
www.packet.deutschepost.com
magazine.deutschepost.com
magazine.deutschepost.com
api-tcb.deutschepost.com
www.packet.deutschepost.com

Certificate

The complete raw certificate details for api.deutschepost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpAObrSzD4d2vvfCnJLg
PGErQ8Vj0Wdhq9P65iHu/vH3CZYLhWgmd6NpVwYwHhovs1zPUrKvXOmcEcMwn7Ew
jt52NjNts+IvUq0iEV7edfoMWu5kMPhi7WaFjH4w7wCSGYGfpHNhUiZj/oWfL1Zs
2u7nR2vtBGPhlPag2jcYMop59Q9wko+sNRXS5ycShTM7S7/GVavjRrC7/bVpVpDL
y4TWGYJVcHRaZByNC7iEH16YONPp782PZP3ALn/MbnoNJO9JtSusmeZ0hqhq7Nux
dLamtR2dTByUmGbwchBk30rkMZtOIEd1uq2mX/3WNAUZRek547rUHTGpPTf+GW2W
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1728717741283320870591073877721042191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DPDHL Global TLS CA - I5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 13:18:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 13:17:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'api.deutschepost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24056314790499855839258372872286561916300710515669118895728710745662119673462750870665043045418220453744849374340859824762749144428958515391424464276718095096161762934968073005877023069724893376692478954656293692908234662423467213309054124454676396191041828551416225921221538793330843351643701725710184547474748568367610272881348946010447445454273611965322320772333171922605761976058131761737543370505026339191320474468319307421905477426167765477255123118945343501326366251920853388483730739532185872144226161310523224788101191045020305147976609961483757727469067138560480910340392587904704892373506300727961691461143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.deutschepost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidhlecommerce-qa.dhl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa.deutschepost.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a0f961a226af17904076f7ae99deb2ffadbc385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/dhltlscai5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/dhltlscai5.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef5bf44b86f9d6f93a538909bc208ebc1aca2260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/dhltlscai5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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