api.deutschepost.com

- Deutsche Post AG -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 40:ee:2b:d7:a4:ef:1f:af:3b:63:85:62 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutsche Post AG

Organization: Deutsche Post AG
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 40:ee:2b:d7:a4:ef:1f:af:3b:63:85:62
Serial Number (int): 20094972013327858163393987938
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 65:ea:39:2e:6f:31:61:7a:cd:d6:70:1c:8a:b9:de:f8:0e:60:e1:e1
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): b2:de:4a:9b:38:2f:0d:0d:58:2f:dd:b1:91:64:9b:86:97:06:3c:1f
Fingerprint (sha256): a7:98:ee:1b:82:b2:3b:b2:4d:38:a3:bc:bd:b7:8a:22:b6:d8:53:32:ea:82:41:75:58:97:20:90:93:c1:8b:16

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate api.deutschepost.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.deutschepost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.deutschepost.com
api-qa.deutschepost.com

Other certificates including the domain name deutschepost.com

(limited to 100 certificates)
packet.deutschepost.com
www.packet.deutschepost.com
www.deutschepost.de
api.deutschepost.com
www.packet.deutschepost.com
api.deutschepost.com
dhl.de
gmppp-testpacket.dhl.com
magazine.deutschepost.com
packet.deutschepost.com
www.deutschepost.de
www.deutschepost.de
www.deutschepost.de
www.packet.deutschepost.com
api-qa.deutschepost.com
magazine.deutschepost.com
dev-dp.tcb.deutschepost.de
packet.dhl.com
dhl.de
api-qa.dhlecommerce.com
gmpppref-w0001.deutschepost.dpwn.com
magazine.deutschepost.com
packet.deutschepost.com
api.deutschepost.com
api.dhlecommerce.com
magazine.deutschepost.com
dhl.de
magazine.deutschepost.com
www.deutschepost.com
www.packet.deutschepost.com
www.deutschepost.de
api-qa.dhlecommerce.com
dhl.de
packet.dhl.com
www.packet.deutschepost.com
www.packet.deutschepost.com
magazine.deutschepost.com
api-tcb.deutschepost.com
api-qa.dhlecommerce.com
gmppp-packet.dhl.com
www.deutschepost.de
packet.deutschepost.com
dhl.de
www.deutschepost.de
www.deutschepost.de
www.packet.deutschepost.com
www.deutschepost.de
dhl.de
magazine.deutschepost.com
packet.deutschepost.com
magazine.deutschepost.com
www.deutschepost.de
api.deutschepost.com
magazine.deutschepost.com
dhl.de
www.deutschepost.de
www.dhl.de
www.deutschepost.de
www.deutschepost.de
api-qa.dhlecommerce.com
magazine.deutschepost.com
dhl.de
api.dhlecommerce.com
api-prod-tmp.deutschepost.com
testpacket.deutschepost.com
packet.dhl.com
api-qa.dhlecommerce.com
www.deutschepost.com
api-qa.dhlecommerce.com
magazine.deutschepost.com
packet.deutschepost.com
www.deutschepost.de
api.dhlecommerce.com
www.packet.deutschepost.com
www.packet.deutschepost.com
magazine.deutschepost.com
magazine.deutschepost.com
api-tcb.deutschepost.com
www.packet.deutschepost.com

Certificate

The complete raw certificate details for api.deutschepost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03OayXfWUN+pL4Sxsfh8
fJz6JIR7G5f8ppU7vRWv5xd/Im6CEWSRWAPuEb0aonc1mI/5ELIupjvTKqCnn0NS
uQ8sjOJuVZeUKtTPd+ghj/U/nJtItkJy8Qe65cjbd3t0ILhSBF/rn7t+XkzcMdMV
6Yj+1z31yA3eRUSCkdLIfd4pGFb2tKUknak79DUQFF89zUbqSxwxVE5SrCbReDKK
Ey4OZEVcUZIrbwL4MrOOeEQZPNaiogVQsItMrpNQPJnEPMWa9L4Ink61sxXcdh8e
9y67P9o+4R1qdrTui5QvM3oQNh3PemGUUpwkFCfgsA79hwa/83L70/Jhc8EE7bzv
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20094972013327858163393987938
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 13:51:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 13:51:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.deutschepost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26693289118846597831408276398842957432406406956675231726303786818975210983569600090685831084601759678659682728269376402860179696079969321845064108124660022579409644218774941939255660854081049138905133125364404431410198674889143282159829828023798636005873234839467922705390667188751038712432328256557019341949066755564321283962748476146534150753437227569756695291731943488014987680945992983600758979755085178658822184838850284410490815370230916047585395987224283841165401949667142424235886593999593030268088635599974628187662425907571918016664782177253512426175261187987887754481764760322816629072257590121560171933681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.deutschepost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa.deutschepost.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65ea392e6f31617acdd6701c8ab9def80e60e1e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016a0caac7b70000040300483046022100cf16d09e37975aa3f796ef688a93debc5abd723ac11324ddd703dd4e06db9fe9022100b85c0659e8c131a167e1dd2b3b7ca5f9368be863276784e40a1372cca82741eb0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a0caac7fd0000040300483046022100a5dd01c6a39997faee7e7423a36a2a07904c2c1523aea4fb7069b1eac219f1f9022100b771948a92356185b6c4cf0ee551fa9ea852964bdedcff2a790a3f6fb6a49e72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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