logistics.dhl

- Deutsche Post AG -

Issued by DPDHL Global TLS CA - I4

About this certificate

This digital certificate with serial number 01:25:b4:16:16:7f:c3:47:a0:7a:91:24:7a:92:59:f7 was issued on by Deutsche Post AG.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutsche Post AG

Organization: Deutsche Post AG
Organization unit: IT Services
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Deutsche Post AG

Organization: Deutsche Post AG
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:25:b4:16:16:7f:c3:47:a0:7a:91:24:7a:92:59:f7
Serial Number (int): 1524995563262063087558525798076013047
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: cf:d1:ec:fc:a6:cc:ec:64:0b:7e:d7:2d:1e:bf:61:c0:ff:cf:a3:1f
AuthorityKeyId: 8e:3f:2e:a8:3c:a7:8d:2f:64:06:60:93:03:99:38:4b:09:86:3e:a3

Fingerprint (sha1): 6d:9d:df:23:eb:ba:27:50:4f:f9:0b:b4:7c:d7:a9:af:94:31:a0:4c
Fingerprint (sha256): c7:57:a9:7e:10:95:79:19:4c:ca:ea:ec:9d:eb:1a:cd:fa:34:7f:de:0f:eb:ca:96:31:84:ca:cb:fc:7f:d0:12

Issuing Certificate URL: http://secure.globalsign.com/cacert/dhltlscai4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/dhltlscai4
CRL Distribution Point: http://crl.globalsign.com/ca/dhltlscai4.crl

Check the revocation status for certificate logistics.dhl

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for logistics.dhl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

delivered.dhl
deliveringtomorrow.com
delivering-tomorrow.com
deliveringtomorrow.de
delivering-tomorrow.de
deliveringtomorrow.eu
delivering-tomorrow.eu
deliveringtomorrow.info
delivering-tomorrow.info
deliveringtomorrow.net
delivering-tomorrow.net
deliveringtomorrow.org
delivering-tomorrow.org
delivering-tomorrow-staging.com
dhlfreight.com
express.dhl
freight.dhl
globalforwarding.dhl
globaltrade.dhl
gogreen.dhl
logistics.dhl
nic.dhl
supplychain.dhl

Other certificates including the domain name logistics.dhl

(limited to 100 certificates)
cj-gaq.logistics.dhl
logistics.dhl
cj-gaq-dev.logistics.dhl
cj-gaq-dev.logistics.dhl
developer.dhl
logistics.dhl
logistics.dhl
logistics.dhl
cj-gaq-dev.logistics.dhl
cj-gaq-staging.logistics.dhl
logistics-uat.dhl.com
logistics.dhl
logistics.dhl
logistics.dhl
logistics.dhl
logistics.dhl
logistics-uat.dhl.com
logistics.dhl
logistics.dhl
cj-gaq-dev.logistics.dhl
videos.mx.logistics.dhl
www.logistics.dhl
videos.mx.logistics.dhl
logistics.dhl
cj-gaq-staging.logistics.dhl
logistics.dhl
logistics.dhl
logistics.dhl
logistics.dhl
logistics.dhl
cj-gaq-staging.logistics.dhl
cj-gaq-dev.logistics.dhl
logistics.dhl
logistics-uat.dhl.com
logistics.dhl
videos.us.logistics.dhl
logistics-uat.dhl.com
cj-gaq.logistics.dhl
videos.ca.logistics.dhl
cj-gaq-staging.logistics.dhl
logistics-uat.dhl.com
logistics.dhl
logistics.dhl
cj-gaq-dev.logistics.dhl
logistics.dhl
logistics.dhl
logistics.dhl
logistics-uat.dhl.com
logistics.dhl
logistics.dhl
logistics.dhl
logistics.dhl
developer.dhl
logistics.dhl
logistics.dhl

logistics.dhl
videos.us.logistics.dhl
logistics.dhl
logistics.dhl
logistics.dhl
cj-gaq.logistics.dhl
logistics-uat.dhl.com
cj-gaq-staging.logistics.dhl
cj-gaq-staging.logistics.dhl
cj-gaq.logistics.dhl
logistics.dhl
logistics.dhl
logistics.dhl
logistics-uat.dhl.com
cj-gaq.logistics.dhl
logistics-uat.dhl.com
logistics.dhl
logistics.dhl
cj-gaq-staging.logistics.dhl
cj-gaq.logistics.dhl
cj-gaq-staging.logistics.dhl
logistics.dhl
logistics.dhl
cj-gaq-staging.logistics.dhl
logistics.dhl
cj-gaq.logistics.dhl
logistics.dhl
logistics.dhl
logistics.dhl
videos.us.logistics.dhl
cj-gaq.logistics.dhl
www.logistics.dhl
logistics.dhl
logistics-uat.dhl.com
logistics.dhl
developer.dhl
logistics-uat.dhl.com
cj-gaq-dev.logistics.dhl
logistics.dhl
logistics.dhl
logistics.dhl
cj-gaq-dev.logistics.dhl
logistics-uat.dhl.com
logistics.dhl

Certificate

The complete raw certificate details for logistics.dhl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIQASW0FhZ/w0egepEkepJZ9zANBgkqhkiG9w0BAQsFADB4
MQswCQYDVQQGEwJERTEZMBcGA1UEChMQRGV1dHNjaGUgUG9zdCBBRzENMAsGA1UE
BxMEQm9ubjEcMBoGA1UECBMTTm9yZHJoZWluLVdlc3RmYWxlbjEhMB8GA1UEAxMY
RFBESEwgR2xvYmFsIFRMUyBDQSAtIEk0MB4XDTIwMDExNjE2MTYxM1oXDTIyMDEx
NTE2MTUxM1owgYMxCzAJBgNVBAYTAkRFMRwwGgYDVQQIDBNOb3JkcmhlaW4tV2Vz
dGZhbGVuMQ0wCwYDVQQHDARCb25uMRkwFwYDVQQKDBBEZXV0c2NoZSBQb3N0IEFH
MRQwEgYDVQQLDAtJVCBTZXJ2aWNlczEWMBQGA1UEAwwNbG9naXN0aWNzLmRobDCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANcOkrMIxw4PQj+FVJfYs2HP
n/+WtyUpXU7XXUC5lldv2hXdlx0vWWCQ9VZSslbZmUM4+t2FytGJFJZ0U4GCWogc
NZSDlfpTz8OVdNTNesmUqAcAEZTRgjTlLG/ES/NZTI60DlVAf6+BowdVDTRjgkj8
srmkFu5PLwXLmk7Tk9zUPmMaeXa0Nr+7exZoAqFtnwZAupBdsYwvDRPeY5OzCuG0
IfWD4hmWnfV+8bqkDm6B8A06zdg1LgZeNi0Fd//7vlNzwWp3cIDL1yrtx8R8/P1o
Y2r7LQmCvzED9Odg+eVSKuDeYrRWNl0f1HoSQWSkJ44VeISjWLVm15efCjBgTS0C
AwEAAaOCA5wwggOYMIIB6AYDVR0RBIIB3zCCAduCDWRlbGl2ZXJlZC5kaGyCFmRl
bGl2ZXJpbmd0b21vcnJvdy5jb22CF2RlbGl2ZXJpbmctdG9tb3Jyb3cuY29tghVk
ZWxpdmVyaW5ndG9tb3Jyb3cuZGWCFmRlbGl2ZXJpbmctdG9tb3Jyb3cuZGWCFWRl
bGl2ZXJpbmd0b21vcnJvdy5ldYIWZGVsaXZlcmluZy10b21vcnJvdy5ldYIXZGVs
aXZlcmluZ3RvbW9ycm93LmluZm+CGGRlbGl2ZXJpbmctdG9tb3Jyb3cuaW5mb4IW
ZGVsaXZlcmluZ3RvbW9ycm93Lm5ldIIXZGVsaXZlcmluZy10b21vcnJvdy5uZXSC
FmRlbGl2ZXJpbmd0b21vcnJvdy5vcmeCF2RlbGl2ZXJpbmctdG9tb3Jyb3cub3Jn
gh9kZWxpdmVyaW5nLXRvbW9ycm93LXN0YWdpbmcuY29tgg5kaGxmcmVpZ2h0LmNv
bYILZXhwcmVzcy5kaGyCC2ZyZWlnaHQuZGhsghRnbG9iYWxmb3J3YXJkaW5nLmRo
bIIPZ2xvYmFsdHJhZGUuZGhsggtnb2dyZWVuLmRobIINbG9naXN0aWNzLmRobIIH
bmljLmRobIIPc3VwcGx5Y2hhaW4uZGhsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFM/R7PymzOxkC37XLR6/
YcD/z6MfMFYGA1UdIARPME0wCAYGZ4EMAQICMEEGCSsGAQQBoDIBFDA0MDIGCCsG
AQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAJ
BgNVHRMEAjAAMIGEBggrBgEFBQcBAQR4MHYwNAYIKwYBBQUHMAGGKGh0dHA6Ly9v
Y3NwLmdsb2JhbHNpZ24uY29tL2NhL2RobHRsc2NhaTQwPgYIKwYBBQUHMAKGMmh0
dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2RobHRsc2NhaTQuY3J0
MB8GA1UdIwQYMBaAFI4/Lqg8p40vZAZgkwOZOEsJhj6jMDwGA1UdHwQ1MDMwMaAv
oC2GK2h0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vY2EvZGhsdGxzY2FpNC5jcmww
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAEvZ72pGh2PO
wRJ9OFzthwkDSd15E85qkB5oMOHR6Evi2ZJPNBq3Kfk7TTxq9Adwf0605u+CslvI
eUQEBp3q/uMb72xcvEGvYdhL4d4PlHNNMTCBxiylHv8C/mKNtr2hL1nuNtzJVOuD
WW81evPedX4V9f5MamWZw6KCy35yM5dSzuISLMNkV8xQf66bmNM7H404O40I5GlE
o63Jt8qsJOpNcMuSCN+I4+X+2GS2G9T/pVVNetfzJOCyiaq3HN8l1pEiFuHFMmSs
ThIswnxhWCQ+wPklXHFHKI5DNZvQPn0Ih7eXhzNrYtQf5hVU31xDjdM8pc7WaKkX
cHhTAHoH4nI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w6SswjHDg9CP4VUl9iz
Yc+f/5a3JSldTtddQLmWV2/aFd2XHS9ZYJD1VlKyVtmZQzj63YXK0YkUlnRTgYJa
iBw1lIOV+lPPw5V01M16yZSoBwARlNGCNOUsb8RL81lMjrQOVUB/r4GjB1UNNGOC
SPyyuaQW7k8vBcuaTtOT3NQ+Yxp5drQ2v7t7FmgCoW2fBkC6kF2xjC8NE95jk7MK
4bQh9YPiGZad9X7xuqQOboHwDTrN2DUuBl42LQV3//u+U3PBandwgMvXKu3HxHz8
/WhjavstCYK/MQP052D55VIq4N5itFY2XR/UehJBZKQnjhV4hKNYtWbXl58KMGBN
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1524995563262063087558525798076013047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DPDHL Global TLS CA - I4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 16:16:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-15 16:15:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'logistics.dhl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27148421803704509842421286853323638933289972490620901657986832866716853629030786731413943022159164836031634936095968025134285426929799028761029847209203341380551197055843844053052723702789225811194401422212377602150932798132807868558462705779537953109786822066237544348615000585763515270403555746541929809326498568208296315256928922985364905308069363716246335744596919313960330844772973638813616802630799733006751339803939766392406108967556745553437489665563269462991616391297015063645799602181661161073787558663470994814468516618208837281619772949188809750308020627385872589424824191556465087748197193721337815780653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivered.dhl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliveringtomorrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivering-tomorrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliveringtomorrow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivering-tomorrow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliveringtomorrow.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivering-tomorrow.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliveringtomorrow.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivering-tomorrow.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliveringtomorrow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivering-tomorrow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliveringtomorrow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivering-tomorrow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivering-tomorrow-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhlfreight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'express.dhl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freight.dhl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalforwarding.dhl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaltrade.dhl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogreen.dhl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logistics.dhl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.dhl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplychain.dhl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfd1ecfca6ccec640b7ed72d1ebf61c0ffcfa31f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/dhltlscai4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/dhltlscai4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8e3f2ea83ca78d2f640660930399384b09863ea3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/dhltlscai4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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