csg.crest.dpwn.com
- Deutsche Post AG -
Issued by DPDHL TLS CA I3
About this certificate
This digital certificate with serial number 59:1e:0b:98:00:01:00:00:14:77 was issued on by Deutsche Post.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Deutsche Post AG
Organization:
Deutsche Post AG
Organization unit: IT Services
Organization unit: IT Services
State / Province:
Nordrhein-Westfalen
Locality: Bonn
Country: DE
Locality: Bonn
Country: DE
Deutsche Post
Organization:
Deutsche Post
State / Province:
Nordrhein-Westfalen
Locality: Bonn
Country: DE
Locality: Bonn
Country: DE
This certificate has expire since
Certificate Details
Serial Number (hex): 59:1e:0b:98:00:01:00:00:14:77Serial Number (int): 420844854715344882766967
Serial Number lenght: 79 bits, 10 octets
SubjectKeyId: fe:45:45:0c:1b:b1:c8:b6:a8:01:14:b8:20:a3:16:b5:97:7c:7b:cf
AuthorityKeyId: c8:03:02:de:c0:b1:ab:83:c5:1e:fe:07:f7:78:bd:e5:83:04:88:7d
Fingerprint (sha1): f6:33:8a:3c:8e:df:cc:df:23:9b:0a:f8:cf:73:97:9b:92:70:54:49
Fingerprint (sha256): f4:43:2a:d4:d5:10:a3:68:dc:13:41:0e:b7:ae:de:e5:66:ee:8b:1c:0e:6a:2f:75:49:74:bd:95:f1:0d:70:4f
Issuing Certificate URL: http://keyserver.dhl.com/pki/i3/dpdhl_tls_i3.crt
Revocation information
OCSP Server: http://ocsp-g3.dhl.com/CRL Distribution Point: http://keyserver.dhl.com/pki/i3/dpdhl_tls_i3.crl
Check the revocation status for certificate csg.crest.dpwn.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for csg.crest.dpwn.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
csg.crest.dpwn.com
uag.crest.dpwn.com
uag-crest.dhl.com
uag.crest.dpwn.com
uag-crest.dhl.com
Other certificates including the domain name dpwn.com
(limited to 100 certificates)
prodws.deutschepost.de
csg.crest.dpwn.com
cig.dhl.de
sysm-essen01.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
www.dpwn.com
csg.crest.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
*.hasci-prod-cn.azure.deutschepost.de
webmail.dhl.com
webmail.dhl.com
RETITREF-A0001.deutschepost.dpwn.com
RETITREF-A0001.deutschepost.dpwn.com
dpc-personal.dpwn.com
gmpppref-w0001.deutschepost.dpwn.com
pstsr1-gpd.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
webmail.dhl.com
csg.crest.dpwn.com
cig.dhl.de
webshipping.dhl.com
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
pi-appswitch.deutschepost.de
wlea-a0007.deutschepost.dpwn.com
cig.dhl.de
pidemo-appswitch.deutschepost.de
cosmo.dpwn.com
scc-prod.deutschepost.dpwn.com
hapo-esi.intra.dpwn.net
csg.crest.dpwn.com
IZE-RG-A0002.deutschepost.dpwn.com
cosmo.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
cig.dhl.de
pi-appswitch.deutschepost.de
klf.dpwn.com
web.dpwn.com
www.dpwn.com
webmail.dhl.com
klf.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
web.dpwn.com
klf.dpwn.com
webmail.dhl.com
dhl-top.dp-dhl.com
ic-app.dpwn.com
prodws.deutschepost.de
csg.crest.dpwn.com
optra.deutschepost.de
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
piref-appswitch.deutschepost.de
csg.crest.dpwn.com
cig.dhl.de
sysm-essen01.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
www.dpwn.com
csg.crest.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
*.hasci-prod-cn.azure.deutschepost.de
webmail.dhl.com
webmail.dhl.com
RETITREF-A0001.deutschepost.dpwn.com
RETITREF-A0001.deutschepost.dpwn.com
dpc-personal.dpwn.com
gmpppref-w0001.deutschepost.dpwn.com
pstsr1-gpd.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
webmail.dhl.com
csg.crest.dpwn.com
cig.dhl.de
webshipping.dhl.com
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
RETITPRD-A0001.deutschepost.dpwn.com
webmail.dhl.com
webmail.dhl.com
pi-appswitch.deutschepost.de
wlea-a0007.deutschepost.dpwn.com
cig.dhl.de
pidemo-appswitch.deutschepost.de
cosmo.dpwn.com
scc-prod.deutschepost.dpwn.com
hapo-esi.intra.dpwn.net
csg.crest.dpwn.com
IZE-RG-A0002.deutschepost.dpwn.com
cosmo.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
cig.dhl.de
pi-appswitch.deutschepost.de
klf.dpwn.com
web.dpwn.com
www.dpwn.com
webmail.dhl.com
klf.dpwn.com
pstsr1-ppx.deutschepost.dpwn.com
web.dpwn.com
klf.dpwn.com
webmail.dhl.com
dhl-top.dp-dhl.com
ic-app.dpwn.com
prodws.deutschepost.de
csg.crest.dpwn.com
optra.deutschepost.de
webmail.dhl.com
pstsr1-gpd.deutschepost.dpwn.com
piref-appswitch.deutschepost.de
Certificate
The complete raw certificate details for csg.crest.dpwn.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIKWR4LmAABAAAUdzANBgkqhkiG9w0BAQUFADBsMQswCQYD VQQGEwJERTEcMBoGA1UECBMTTm9yZHJoZWluLVdlc3RmYWxlbjENMAsGA1UEBxME Qm9ubjEWMBQGA1UEChMNRGV1dHNjaGUgUG9zdDEYMBYGA1UEAxMPRFBESEwgVExT IENBIEkzMB4XDTE0MTAwMjAzMjU0M1oXDTE1MTAwMjAzMjU0M1owgYgxCzAJBgNV BAYTAkRFMRwwGgYDVQQIExNOb3JkcmhlaW4tV2VzdGZhbGVuMQ0wCwYDVQQHEwRC b25uMRkwFwYDVQQKExBEZXV0c2NoZSBQb3N0IEFHMRQwEgYDVQQLEwtJVCBTZXJ2 aWNlczEbMBkGA1UEAxMSY3NnLmNyZXN0LmRwd24uY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAymE4gxiJIsRmdev12ABal6iNCTws6TtmjpsJMav2 S6uoR2l3OtDzpO2TpYOpm6FTW/z89jkvo2TKS/YV7vFO9l25Ztg4AavzDCqb6CnM YYSnigfjvy640wgQUHlG9PYbSOll3BLPtUNySJH8iYzuKGZhRKc5hCcopYzsUoMH Aw5m+kBhwFlzOZUfRXu9O1/Mg89Y+LpKm6jkNzdOc/lA4MmTuFmR2Qvkspw4sNNW pB4rTjhCpTaPodSJAfs/9acDEKwqKLzg0uUOpiEH4jGVDmcmLxe4BEnsYse9n0Zo KbRSKkEgGbHdLifieejYthciOt1If3Sus+1uvaUVzWgerQIDAQABo4ICYTCCAl0w CwYDVR0PBAQDAgWgMEQGA1UdEQQ9MDuCEmNzZy5jcmVzdC5kcHduLmNvbYISdWFn LmNyZXN0LmRwd24uY29tghF1YWctY3Jlc3QuZGhsLmNvbTAdBgNVHQ4EFgQU/kVF DBuxyLaoARS4IKMWtZd8e88wHwYDVR0jBBgwFoAUyAMC3sCxq4PFHv4H93i95YME iH0wQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2tleXNlcnZlci5kaGwuY29tL3Br aS9pMy9kcGRobF90bHNfaTMuY3JsMHEGCCsGAQUFBwEBBGUwYzAjBggrBgEFBQcw AYYXaHR0cDovL29jc3AtZzMuZGhsLmNvbS8wPAYIKwYBBQUHMAKGMGh0dHA6Ly9r ZXlzZXJ2ZXIuZGhsLmNvbS9wa2kvaTMvZHBkaGxfdGxzX2kzLmNydDA8BgkrBgEE AYI3FQcELzAtBiUrBgEEAYI3FQiB4KwqgvzBE4T9gQ+F6qVpg+U3gQ26xlmE8d9c AgFkAgEGMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBGBgNVHSAEPzA9 MDsGBmeBDAECAjAxMC8GCCsGAQUFBwIBFiNodHRwOi8va2V5c2VydmVyLmRobC5j b20vcmVwb3NpdG9yeTAnBgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMCMAoGCCsG AQUFBwMBMEQGCSqGSIb3DQEJDwQ3MDUwDgYIKoZIhvcNAwICAgCAMA4GCCqGSIb3 DQMEAgIAgDAHBgUrDgMCBzAKBggqhkiG9w0DBzANBgkqhkiG9w0BAQUFAAOCAQEA POCWmAWrkMzgzWBGe4BsM1H4i2+l7n1six53GoqnmTW0hFesEufqyRseVegPjCtK zCt+LKl9Wrz/EhxBJmi62QY89bW0P2a0W892SPJXtzMpYcjQz9m5uUnframIRMcZ eyO8v3unHfSQkhLMhIMn5o2pozbxMRoCe5L8B8aGvv8HR0uXS+ND2hPmzsQ+pi2X mcAsDCXQU2HX9Wdroc6SDX3GSJdgo9/kE6QQdfXYQw4MiPU3ZD+mRCWntobRsM1O QOzKS2ibM47kJuNFEbtFDB6TdOodPldzmisiWcAwxEHZPkPZaVS0sImZsRoZ/Xu2 zuLwv5bduFdIwOzHvh0YhQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymE4gxiJIsRmdev12ABa l6iNCTws6TtmjpsJMav2S6uoR2l3OtDzpO2TpYOpm6FTW/z89jkvo2TKS/YV7vFO 9l25Ztg4AavzDCqb6CnMYYSnigfjvy640wgQUHlG9PYbSOll3BLPtUNySJH8iYzu KGZhRKc5hCcopYzsUoMHAw5m+kBhwFlzOZUfRXu9O1/Mg89Y+LpKm6jkNzdOc/lA 4MmTuFmR2Qvkspw4sNNWpB4rTjhCpTaPodSJAfs/9acDEKwqKLzg0uUOpiEH4jGV DmcmLxe4BEnsYse9n0ZoKbRSKkEgGbHdLifieejYthciOt1If3Sus+1uvaUVzWge rQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 420844854715344882766967 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DPDHL TLS CA I3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-02 03:25:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-02 03:25:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csg.crest.dpwn.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25548078941946402085962835716082911203655220888067235638796813017675503636636230242399854761744954523637320157504543532912901307530797469755091761651653278270089685223037785948095743888346916033881913451961868633805710343581621492335188016082737270944016765562640549685912081114482351345019280459460554975102277324412520199469138331546019838136777342943781968760884932539511788762094892548678725084732191664023079697934257831581520894560995852077311139865954827243799561139703959409196715759925378321794458652106829619116418046956479770349854408867707536155471232841994923951239211465088585434615506351487728319209133 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csg.crest.dpwn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uag.crest.dpwn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uag-crest.dhl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fe45450c1bb1c8b6a80114b820a316b5977c7bcf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c80302dec0b1ab83c51efe07f778bde58304887d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://keyserver.dhl.com/pki/i3/dpdhl_tls_i3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-g3.dhl.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://keyserver.dhl.com/pki/i3/dpdhl_tls_i3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.3675690.6234259.10436751.12227305.62135.141.959321.10252252 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://keyserver.dhl.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.15 (sMIMECapabilities) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.2 (rc2CBC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.4 (rc4) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.7 (desCBC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.7 (des-EDE3-CBC) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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