csg.crest.dpwn.com

- Deutsche Post AG -

Issued by DPWN SSL CA I2 PS

About this certificate

This digital certificate with serial number 17:72:2c:dc:00:00:00:00:0a:73 was issued on by Deutsche Post World Net.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Deutsche Post AG

Organization: Deutsche Post AG
Organization unit: IT Services
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Deutsche Post World Net

Organization: Deutsche Post World Net
Organization unit: I2 PS

This certificate has expire since

Certificate Details

Serial Number (hex): 17:72:2c:dc:00:00:00:00:0a:73
Serial Number (int): 110720590389037273975411
Serial Number lenght: 77 bits, 10 octets

SubjectKeyId: 9d:91:56:87:42:a4:46:de:e2:a2:1b:9e:04:3e:04:e6:e8:07:ce:b5
AuthorityKeyId: 18:49:c1:32:d3:a8:df:41:18:26:a1:01:83:bf:19:6a:d2:19:55:6a

Fingerprint (sha1): 9b:6c:f6:66:14:cf:f6:33:25:a4:b4:6b:25:59:0d:48:53:08:fa:d1
Fingerprint (sha256): 4d:75:80:56:c4:af:1e:2a:65:74:20:38:e0:8a:83:7b:c3:24:4e:b6:28:c7:d4:82:1f:55:77:eb:78:aa:2c:07

Issuing Certificate URL: http://keyserver.dpwn.net/pki/I2/dpwn_ssl_i2_ps.crt

Revocation information

OCSP Server: http://ocsp.dpwn.net/
CRL Distribution Point: http://keyserver.dpwn.net/pki/I2/dpwn_ssl_i2_ps.crl

Check the revocation status for certificate csg.crest.dpwn.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for csg.crest.dpwn.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csg.crest.dpwn.com
uag.crest.dpwn.com
uag-crest.dhl.com

Other certificates including the domain name dpwn.com

(limited to 100 certificates)
prodws.deutschepost.de
csg.crest.dpwn.com
cig.dhl.de
sysm-essen01.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
www.dpwn.com
csg.crest.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
*.hasci-prod-cn.azure.deutschepost.de
webmail.dhl.com
webmail.dhl.com
RETITREF-A0001.deutschepost.dpwn.com
RETITREF-A0001.deutschepost.dpwn.com
dpc-personal.dpwn.com
gmpppref-w0001.deutschepost.dpwn.com
pstsr1-gpd.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
webmail.dhl.com
csg.crest.dpwn.com
cig.dhl.de
webshipping.dhl.com
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
pi-appswitch.deutschepost.de
wlea-a0007.deutschepost.dpwn.com
cig.dhl.de
pidemo-appswitch.deutschepost.de
cosmo.dpwn.com
scc-prod.deutschepost.dpwn.com
hapo-esi.intra.dpwn.net
csg.crest.dpwn.com
IZE-RG-A0002.deutschepost.dpwn.com
cosmo.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
cig.dhl.de
pi-appswitch.deutschepost.de
klf.dpwn.com
web.dpwn.com
www.dpwn.com
webmail.dhl.com
klf.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
web.dpwn.com
klf.dpwn.com
webmail.dhl.com
dhl-top.dp-dhl.com
ic-app.dpwn.com
prodws.deutschepost.de
csg.crest.dpwn.com
optra.deutschepost.de
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
piref-appswitch.deutschepost.de

Certificate

The complete raw certificate details for csg.crest.dpwn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxKEDnOhzAaHZQo/Gg3rPlyZNt
iIZEXjxDIhPlregBYzRTbx4fF9DIrfq1y5QDwgrsl8VfpO5pp3YJASAsfqCyfv4G
5R2QqVVBw3oYqp9enW3Cr5rGHXUx/vpOX1uHy3TVJ8pig5xzJe/fvI+updWR99lI
ki9NlGUqt/g6luOibwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 110720590389037273975411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post World Net'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'I2 PS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DPWN SSL CA I2 PS'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-03-09 13:44:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-03-09 13:54:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csg.crest.dpwn.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 124404044827666550011906281268494408483130633460131342679084340919733755453816121187044170414026245916514204263717909528705369831783024408296993949202817368740596799252392695645492425868424747991239166884037688934728713656559484096615419124957294378980286849396268936505003928288009055435467844586133988287087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csg.crest.dpwn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uag.crest.dpwn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uag-crest.dhl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d91568742a446dee2a21b9e043e04e6e807ceb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1849c132d3a8df411826a10183bf196ad219556a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://keyserver.dpwn.net/pki/I2/dpwn_ssl_i2_ps.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://keyserver.dpwn.net/pki/I2/dpwn_ssl_i2_ps.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dpwn.net/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2 (enrollCerttypeExtension)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 87 0 101 0 98 0 83 0 101 0 114 0 118 0 101 0 114]
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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