www.packet.deutschepost.com

- Deutsche Post -

Issued by DPDHL TLS SHA2 CA I3

About this certificate

This digital certificate with serial number 50:a1:40:ce:00:03:00:00:1c:d8 was issued on by Deutsche Post.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Deutsche Post

Organization: Deutsche Post
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Deutsche Post

Organization: Deutsche Post
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 50:a1:40:ce:00:03:00:00:1c:d8
Serial Number (int): 380763914095315369598168
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: 66:a1:53:ae:69:9e:5d:a3:3f:f0:42:ba:ba:e5:60:c8:c7:7c:32:87
AuthorityKeyId: 1c:2f:0f:4e:b9:bd:4e:89:5d:64:62:6e:de:e0:a3:09:29:14:db:1f

Fingerprint (sha1): e7:cb:24:8a:c1:fb:27:0b:8e:2d:14:47:57:14:27:5d:cf:c1:1b:8c
Fingerprint (sha256): 58:7a:97:a5:64:25:53:b6:af:7e:c9:51:21:76:04:3f:b5:b1:62:ed:a3:7d:91:34:22:6b:ee:4a:c2:ec:23:ab

Issuing Certificate URL: http://keyserver.dhl.com/pki/i3/dpdhl_tls_sha2_i3.crt

Revocation information

OCSP Server: http://ocsp-g3.dhl.com/
CRL Distribution Point: http://keyserver.dhl.com/pki/i3/dpdhl_tls_sha2_i3.crl

Check the revocation status for certificate www.packet.deutschepost.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.packet.deutschepost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.packet.deutschepost.com

Other certificates including the domain name deutschepost.com

(limited to 100 certificates)
packet.deutschepost.com
www.packet.deutschepost.com
www.deutschepost.de
api.deutschepost.com
www.packet.deutschepost.com
api.deutschepost.com
dhl.de
gmppp-testpacket.dhl.com
magazine.deutschepost.com
packet.deutschepost.com
www.deutschepost.de
www.deutschepost.de
www.deutschepost.de
www.packet.deutschepost.com
api-qa.deutschepost.com
magazine.deutschepost.com
dev-dp.tcb.deutschepost.de
packet.dhl.com
dhl.de
api-qa.dhlecommerce.com
gmpppref-w0001.deutschepost.dpwn.com
magazine.deutschepost.com
packet.deutschepost.com
api.deutschepost.com
api.dhlecommerce.com
magazine.deutschepost.com
dhl.de
magazine.deutschepost.com
www.deutschepost.com
www.packet.deutschepost.com
www.deutschepost.de
api-qa.dhlecommerce.com
dhl.de
packet.dhl.com
www.packet.deutschepost.com
www.packet.deutschepost.com
magazine.deutschepost.com
api-tcb.deutschepost.com
api-qa.dhlecommerce.com
gmppp-packet.dhl.com
www.deutschepost.de
packet.deutschepost.com
dhl.de
www.deutschepost.de
www.deutschepost.de
www.packet.deutschepost.com
www.deutschepost.de
dhl.de
magazine.deutschepost.com
packet.deutschepost.com
magazine.deutschepost.com
www.deutschepost.de
api.deutschepost.com
magazine.deutschepost.com
dhl.de
www.deutschepost.de
www.dhl.de
www.deutschepost.de
www.deutschepost.de
api-qa.dhlecommerce.com
magazine.deutschepost.com
dhl.de
api.dhlecommerce.com
api-prod-tmp.deutschepost.com
testpacket.deutschepost.com
packet.dhl.com
api-qa.dhlecommerce.com
www.deutschepost.com
api-qa.dhlecommerce.com
magazine.deutschepost.com
packet.deutschepost.com
www.deutschepost.de
api.dhlecommerce.com
www.packet.deutschepost.com
www.packet.deutschepost.com
magazine.deutschepost.com
magazine.deutschepost.com
api-tcb.deutschepost.com
www.packet.deutschepost.com

Certificate

The complete raw certificate details for www.packet.deutschepost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9lodVZpasbFrWQCnfoj
tlH6Lk8OyQ2LzqboybTfutWsaKlbfEB+2f/1akr+El890AQbD4mlfWjt2Yc8VbtS
RSPOg7FC4qK0NJk0VWOQcyJGS8xc6NiLVxIMH+QxnzCfPbGv1Q7y+XYxpY1kPlih
LSlly3OABIzI5a+rA3vDFQChZf/XbQUyGz4Alq6N2Z1odDiCHEtCqNEmcHo+YVj9
TmJczOsuWFFB5pLiB/N74LyKWo7IK4LPkCKno/QxjICpdpyG8aN1lFL6ogNEaxFb
Cn/BsC5YFhWLIJwrunKLc/bQMiska9g9FXn/6MByR0lBLiXsIY6I4AI3gE0tA5qb
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380763914095315369598168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DPDHL TLS SHA2 CA I3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-22 08:29:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-22 08:29:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.packet.deutschepost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23208817709217369077473389240927635373563800926159919365754194600885046672151003560076923884101477272199750891406375077654415602398689765839534461453206292694421552517905582563211392741688057523135993496726575782648159891418920026153641060485642717235454005314385615873211308243987775079529279285580406834464703240865728003886867358939319310172652770245523343587145456764780789340936399960733007622399514937413227890969958673709790693196607230272392692115827938501464737616091761171306263536710787606812873294445944778627918480142398150322394451810407901640236655114637657988705650070957260360490419393306109566163883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66a153ae699e5da33ff042babae560c8c77c3287
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1c2f0f4eb9bd4e895d64626edee0a3092914db1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://keyserver.dhl.com/pki/i3/dpdhl_tls_sha2_i3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://keyserver.dhl.com/pki/i3/dpdhl_tls_sha2_i3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-g3.dhl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.3675690.6234259.10436751.12227305.62135.141.2396310.7154851
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://keyserver.dhl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.15 (sMIMECapabilities)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.2 (rc2CBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.4 (rc4)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.7 (desCBC)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.7 (des-EDE3-CBC)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.packet.deutschepost.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a20a8e8402fce1846bbbea9092d0d536a0b66bbe515e99abfa95538d1bf9bf22892ee8b19b3d9ffc0827d16295c914dcf0024bb45b084d7921c9a6c01650ac7298f0fa167bd0b08566a0f19d16e9bf7ba8d9a6191c60246a77d1ed3b5eef304fc648cfb3bf9477c281b104e04bb39373e92cdd15b8255fede2dca1d6396d6b3e1a438e49098e9603c068aecbca2ecf86e9bb3c2b0584e3849a7c4ee4a9c73cb976d28c1637728b31d2e2456c6883b9c227508732b358b9509339f0dc13c228ab84ae85c8f837c333ea824e5139e7a865d1dea3139900adef5088879462e9449a905d861e3ea4a744f898a2d31c82fd1d1ea6b73371065c92de8d370e00f79e1