csg.crest.dpwn.com

- Deutsche Post AG -

Issued by DPWN SSL CA I2 PS

About this certificate

This digital certificate with serial number 57:5e:f4:9c:00:00:00:00:19:4b was issued on by Deutsche Post World Net.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Deutsche Post AG

Organization: Deutsche Post AG
Organization unit: IT Services
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Deutsche Post World Net

Organization: Deutsche Post World Net
Organization unit: I2 PS

This certificate has expire since

Certificate Details

Serial Number (hex): 57:5e:f4:9c:00:00:00:00:19:4b
Serial Number (int): 412597503915629452728651
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: 9d:91:56:87:42:a4:46:de:e2:a2:1b:9e:04:3e:04:e6:e8:07:ce:b5
AuthorityKeyId: 18:49:c1:32:d3:a8:df:41:18:26:a1:01:83:bf:19:6a:d2:19:55:6a

Fingerprint (sha1): c2:87:bb:58:c1:44:15:83:a2:50:be:ec:0f:34:48:97:ef:34:36:fc
Fingerprint (sha256): 90:38:c0:77:90:ac:91:90:85:c6:c9:e6:1b:f2:66:2f:bb:08:01:45:ad:28:38:44:08:d9:85:cf:38:8b:f0:4f

Issuing Certificate URL: http://keyserver.dpwn.net/pki/I2/dpwn_ssl_i2_ps.crt

Revocation information

OCSP Server: http://ocsp.dpwn.net/
CRL Distribution Point: http://keyserver.dpwn.net/pki/I2/dpwn_ssl_i2_ps.crl

Check the revocation status for certificate csg.crest.dpwn.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for csg.crest.dpwn.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csg.crest.dpwn.com
uag.crest.dpwn.com
uag-crest.dhl.com

Other certificates including the domain name dpwn.com

(limited to 100 certificates)
prodws.deutschepost.de
csg.crest.dpwn.com
cig.dhl.de
sysm-essen01.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
www.dpwn.com
csg.crest.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
*.hasci-prod-cn.azure.deutschepost.de
webmail.dhl.com
webmail.dhl.com
RETITREF-A0001.deutschepost.dpwn.com
RETITREF-A0001.deutschepost.dpwn.com
dpc-personal.dpwn.com
gmpppref-w0001.deutschepost.dpwn.com
pstsr1-gpd.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
webmail.dhl.com
csg.crest.dpwn.com
cig.dhl.de
webshipping.dhl.com
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
pi-appswitch.deutschepost.de
wlea-a0007.deutschepost.dpwn.com
cig.dhl.de
pidemo-appswitch.deutschepost.de
cosmo.dpwn.com
scc-prod.deutschepost.dpwn.com
hapo-esi.intra.dpwn.net
csg.crest.dpwn.com
IZE-RG-A0002.deutschepost.dpwn.com
cosmo.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
cig.dhl.de
pi-appswitch.deutschepost.de
klf.dpwn.com
web.dpwn.com
www.dpwn.com
webmail.dhl.com
klf.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
web.dpwn.com
klf.dpwn.com
webmail.dhl.com
dhl-top.dp-dhl.com
ic-app.dpwn.com
prodws.deutschepost.de
csg.crest.dpwn.com
optra.deutschepost.de
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
piref-appswitch.deutschepost.de

Certificate

The complete raw certificate details for csg.crest.dpwn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxKEDnOhzAaHZQo/Gg3rPlyZNt
iIZEXjxDIhPlregBYzRTbx4fF9DIrfq1y5QDwgrsl8VfpO5pp3YJASAsfqCyfv4G
5R2QqVVBw3oYqp9enW3Cr5rGHXUx/vpOX1uHy3TVJ8pig5xzJe/fvI+updWR99lI
ki9NlGUqt/g6luOibwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412597503915629452728651
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post World Net'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'I2 PS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DPWN SSL CA I2 PS'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-03-07 10:04:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-07 10:14:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csg.crest.dpwn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 124404044827666550011906281268494408483130633460131342679084340919733755453816121187044170414026245916514204263717909528705369831783024408296993949202817368740596799252392695645492425868424747991239166884037688934728713656559484096615419124957294378980286849396268936505003928288009055435467844586133988287087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csg.crest.dpwn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uag.crest.dpwn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uag-crest.dhl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d91568742a446dee2a21b9e043e04e6e807ceb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1849c132d3a8df411826a10183bf196ad219556a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://keyserver.dpwn.net/pki/I2/dpwn_ssl_i2_ps.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://keyserver.dpwn.net/pki/I2/dpwn_ssl_i2_ps.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dpwn.net/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2 (enrollCerttypeExtension)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 87 0 101 0 98 0 83 0 101 0 114 0 118 0 101 0 114]
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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