RETITPRD-A0001.deutschepost.dpwn.com
- Deutsche Post AG -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 06:6d:eb:05:7c:93:03:8f:ae:c3:26:da was issued on by GlobalSign nv-sa.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Deutsche Post AG
Organization:
Deutsche Post AG
State / Province:
Nordrhein-Westfalen
Locality: Bonn
Country: DE
Locality: Bonn
Country: DE
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 06:6d:eb:05:7c:93:03:8f:ae:c3:26:daSerial Number (int): 1989792830599782125491398362
Serial Number lenght: 91 bits, 12 octets
SubjectKeyId: ab:26:68:3e:27:a8:20:71:d4:99:b1:24:b6:dc:d9:9a:9a:22:e7:8d
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): 93:85:6a:94:85:44:bc:c3:26:69:49:dc:c7:e4:ba:95:b4:bd:01:ec
Fingerprint (sha256): 70:9d:35:5f:df:90:f0:aa:73:2f:41:e2:95:c3:06:ac:d0:3a:bc:b3:2e:20:57:69:8e:5e:6b:06:7b:1d:68:45
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl
Check the revocation status for certificate RETITPRD-A0001.deutschepost.dpwn.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for RETITPRD-A0001.deutschepost.dpwn.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
RETITPRD-A0001.deutschepost.dpwn.com
Other certificates including the domain name dpwn.com
(limited to 100 certificates)
prodws.deutschepost.de
csg.crest.dpwn.com
cig.dhl.de
sysm-essen01.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
www.dpwn.com
csg.crest.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
*.hasci-prod-cn.azure.deutschepost.de
webmail.dhl.com
webmail.dhl.com
RETITREF-A0001.deutschepost.dpwn.com
RETITREF-A0001.deutschepost.dpwn.com
dpc-personal.dpwn.com
gmpppref-w0001.deutschepost.dpwn.com
pstsr1-gpd.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
webmail.dhl.com
csg.crest.dpwn.com
cig.dhl.de
webshipping.dhl.com
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
pi-appswitch.deutschepost.de
wlea-a0007.deutschepost.dpwn.com
cig.dhl.de
pidemo-appswitch.deutschepost.de
cosmo.dpwn.com
scc-prod.deutschepost.dpwn.com
hapo-esi.intra.dpwn.net
csg.crest.dpwn.com
IZE-RG-A0002.deutschepost.dpwn.com
cosmo.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
cig.dhl.de
pi-appswitch.deutschepost.de
klf.dpwn.com
web.dpwn.com
www.dpwn.com
webmail.dhl.com
klf.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
web.dpwn.com
klf.dpwn.com
webmail.dhl.com
dhl-top.dp-dhl.com
ic-app.dpwn.com
prodws.deutschepost.de
csg.crest.dpwn.com
optra.deutschepost.de
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
piref-appswitch.deutschepost.de
csg.crest.dpwn.com
cig.dhl.de
sysm-essen01.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
www.dpwn.com
csg.crest.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
*.hasci-prod-cn.azure.deutschepost.de
webmail.dhl.com
webmail.dhl.com
RETITREF-A0001.deutschepost.dpwn.com
RETITREF-A0001.deutschepost.dpwn.com
dpc-personal.dpwn.com
gmpppref-w0001.deutschepost.dpwn.com
pstsr1-gpd.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
webmail.dhl.com
csg.crest.dpwn.com
cig.dhl.de
webshipping.dhl.com
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
pi-appswitch.deutschepost.de
wlea-a0007.deutschepost.dpwn.com
cig.dhl.de
pidemo-appswitch.deutschepost.de
cosmo.dpwn.com
scc-prod.deutschepost.dpwn.com
hapo-esi.intra.dpwn.net
csg.crest.dpwn.com
IZE-RG-A0002.deutschepost.dpwn.com
cosmo.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
cig.dhl.de
pi-appswitch.deutschepost.de
klf.dpwn.com
web.dpwn.com
www.dpwn.com
webmail.dhl.com
klf.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
web.dpwn.com
klf.dpwn.com
webmail.dhl.com
dhl-top.dp-dhl.com
ic-app.dpwn.com
prodws.deutschepost.de
csg.crest.dpwn.com
optra.deutschepost.de
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
piref-appswitch.deutschepost.de
Certificate
The complete raw certificate details for RETITPRD-A0001.deutschepost.dpwn.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIMBm3rBXyTA4+uwybaMA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0xOTA2MjQxMTE2MDlaFw0y MDA2MjQxMTE2MDlaMIGEMQswCQYDVQQGEwJERTEcMBoGA1UECBMTTm9yZHJoZWlu LVdlc3RmYWxlbjENMAsGA1UEBxMEQm9ubjEZMBcGA1UEChMQRGV1dHNjaGUgUG9z dCBBRzEtMCsGA1UEAxMkUkVUSVRQUkQtQTAwMDEuZGV1dHNjaGVwb3N0LmRwd24u Y29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxo7cEQy+0+W8K411 H//ToEqAkLnVpAWO4BZh4zFvMoznTHkai4dMdtNKr2zMrkIOhE/O+r8Uj7eqbbXp axkSFCbTdB7iHcSYZyEZAy/r8nafUsWtLbvkWLtiMYuhos1q7trLc+jTdM6cG7pk 8ppQ8A9LDCHHG5uKfymulV+St+3dh7CGBdAAGRhnSb2vOrL1tq1G8OWlu7BS1ZPJ L2RBxjUqKPXCTfzU03qaDRGke14nDQ41Wt/NyphdyLTk9kqJVjQ9h5OESWhl01tP ynFrDroVOfnumcuvvxZbteNXeelr++6jL8ZpOGulwrmotwtEe+deo6PCCjsF7vmW MZs1WGmOePS9qyiJfiujSNOOef7lINK1SF+GAsO8kwWtIGzKQx2hpAzFwY48yzCD majeqqJg+JGQfytLLHVVDx9ZwTO08OCSAxDaUp6weaa7hC76TC0QyFRHa5gjQVzp PilK9vROJB3IxibLZ8v43fGoSWhwHGfEyduYddHhq3NovA2nZOml0guh1nGi29SH SZmeFnz8rOXwpTQiMUvB3TgjuiYBu0JSbaf3J6dZLyn/KQAhbLFgPNEnKaXq46OE Bwmh7x90/jn0ds5EIjg3GFjyenBbKWV0cP/jp7rpaXsbGRHWFPRMA9/APBywOdIu H2aXVcu5KNO3OZeR2/c8++H+xzMCAwEAAaOCAe4wggHqMA4GA1UdDwEB/wQEAwIF oDCBjgYIKwYBBQUHAQEEgYEwfzBEBggrBgEFBQcwAoY4aHR0cDovL3NlY3VyZS5n bG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nyc2FvdnNzbGNhMjAxOC5jcnQwNwYIKwYB BQUHMAGGK2h0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIw MTgwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggrBgEFBQcCARYmaHR0cHM6 Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQICMAkGA1Ud EwQCMAAwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NybC5nbG9iYWxzaWduLmNv bS9nc3JzYW92c3NsY2EyMDE4LmNybDAvBgNVHREEKDAmgiRSRVRJVFBSRC1BMDAw MS5kZXV0c2NoZXBvc3QuZHB3bi5jb20wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMB8GA1UdIwQYMBaAFPjvf/LNeGeo3m+PJI2I8YcDArPrMB0GA1UdDgQW BBSrJmg+J6ggcdSZsSS23NmamiLnjTATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq hkiG9w0BAQsFAAOCAQEASMfvG5sm1oT+u7w3f5TxbL56xPk9U6b/MzxcsqexywSo ige9mb9zXVMGPUUW9HZJs7hDqiD6CRq0mEOgJqE4HBXBKjUQF5qt1zfolqIBLH7T OqgU3KerF2fkbb7h7bEN0YbVCVPa4b40stHSpIWXwtGboSX07RbEktQYkKDPT4Hl EvMB+6j6STV6gTJceRz9tGCknM4gAO6rryVRqKn6g0vdwZT2vcf6Hqt6bkVg5oll 72WJ7/v+oiC3UDjeOmlRfnFi85h/v/KQIQuA54P1Zb1cv4ZPCphn4zZ39unceBvu ME/VeqVEtYF/88JvDs8wv1cJOMWvgHqmtHLdrns8Tg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxo7cEQy+0+W8K411H//T oEqAkLnVpAWO4BZh4zFvMoznTHkai4dMdtNKr2zMrkIOhE/O+r8Uj7eqbbXpaxkS FCbTdB7iHcSYZyEZAy/r8nafUsWtLbvkWLtiMYuhos1q7trLc+jTdM6cG7pk8ppQ 8A9LDCHHG5uKfymulV+St+3dh7CGBdAAGRhnSb2vOrL1tq1G8OWlu7BS1ZPJL2RB xjUqKPXCTfzU03qaDRGke14nDQ41Wt/NyphdyLTk9kqJVjQ9h5OESWhl01tPynFr DroVOfnumcuvvxZbteNXeelr++6jL8ZpOGulwrmotwtEe+deo6PCCjsF7vmWMZs1 WGmOePS9qyiJfiujSNOOef7lINK1SF+GAsO8kwWtIGzKQx2hpAzFwY48yzCDmaje qqJg+JGQfytLLHVVDx9ZwTO08OCSAxDaUp6weaa7hC76TC0QyFRHa5gjQVzpPilK 9vROJB3IxibLZ8v43fGoSWhwHGfEyduYddHhq3NovA2nZOml0guh1nGi29SHSZme Fnz8rOXwpTQiMUvB3TgjuiYBu0JSbaf3J6dZLyn/KQAhbLFgPNEnKaXq46OEBwmh 7x90/jn0ds5EIjg3GFjyenBbKWV0cP/jp7rpaXsbGRHWFPRMA9/APBywOdIuH2aX Vcu5KNO3OZeR2/c8++H+xzMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1989792830599782125491398362 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 11:16:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 11:16:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RETITPRD-A0001.deutschepost.dpwn.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810046152277111482824090602312828423999233216672605006181897950912805401352716253834993781122841692896787143597392409295967049630950586321270008938203244614090670355386234557445491624113673628134352199520470487120707821901336277619459153601893771704989280991849708896949576374210557816429137164988351901697258291250085287568022878632533346743668863369665472993587717186635558161878394651369473880920797608591384676455410010991318237277379371369502335038183157351045872537443115740902039593169694281034180898126987753850665906726537361191404812136515136846442766554718044138478269115657698074721582327637907676042155844722463823589227934998337446945525902779802539768459452144204645993553362703740502131001290750937732086925633568091765692910970761837417141679770528428780708996805406775656462012146210359943933938244751932202181500354166687779906335536426006131923000263924157145088347888929674487638305107063425867187595587484702499879714435393489609228061665472594723317265530828938522712852307631393715946553324831806464910974657666967318267608958129420565757100113124157684231989075215424104149434718780667623262160208450729156782928837730380236503169174413285185640621926603936252244371100023636442280996404674507350790901778227 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RETITPRD-A0001.deutschepost.dpwn.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ab26683e27a82071d499b124b6dcd99a9a22e78d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0048c7ef1b9b26d684febbbc377f94f16cbe7ac4f93d53a6ff333c5cb2a7b1cb04a88a07bd99bf735d53063d4516f47649b3b843aa20fa091ab49843a026a1381c15c12a3510179aadd737e896a2012c7ed33aa814dca7ab1767e46dbee1edb10dd186d50953dae1be34b2d1d2a48597c2d19ba125f4ed16c492d41890a0cf4f81e512f301fba8fa49357a81325c791cfdb460a49cce2000eeabaf2551a8a9fa834bddc194f6bdc7fa1eab7a6e4560e68965ef6589effbfea220b75038de3a69517e7162f3987fbff290210b80e783f565bd5cbf864f0a9867e33677f6e9dc781bee304fd57aa544b5817ff3c26f0ecf30bf570938c5af807aa6b472ddae7b3c4e