\> [!caution] This page contained a drawing which was not converted.   

![CBP Workstation 1Net WAN IPSECOMVPN Service Provid...](Exported%20image%2020250808202553-0.png)
       

Web CRL Service - Web site to retrieve certificate revocation lists (CRL's)  
TNWG01A-V1652.AD.CBP.DHS.GOV - CBP-EDME-NPE-WES.CBP.DHS.GOV  
TNWG01A-V3454.AD.CBP.DHS.GOV - CBP-EDME-NPE-WES2.CBP.DHS.GOV  
Server 2022
 
Web CRL Service - Public Web site to retrieve certificate revocation lists (CRL's)  
TGCP01A-V0005.dmz.CBP.DHS.GOV - CBP-EDME-NPE-WES.CBP.DHS.GOV  
TGCP01A-V0006.dmz.CBP.DHS.GOV - CBP-EDME-NPE-WES2.CBP.DHS.GOV
 
OCSP Responder - The OCSP Client is a component that generates OCSP requests based on information stored in the AIA extension of the certificate it is validating.  
TNWG01A-V1652.AD.CBP.DHS.GOV - CBP-EDME-NPE-WES.CBP.DHS.GOV  
TNWG01A-V3454.AD.CBP.DHS.GOV - CBP-EDME-NPE-WES2.CBP.DHS.GOV

SubCA: Online internal NPE Subordinate Issuing CA / network authentication  
TNWG01A-V1651.AD.CBP.DHS.GOV - CBP-EDME-NPE-CA2.CBP.DHS.GOV  
TNWG01A-V3455.AD.CBP.DHS.GOV - CBP-EDME-NPE-CA3.CBP.DHS.GOV  
TNWG01A-V3456.AD.CBP.DHS.GOV - CBP-EDME-NPE-CA4.CBP.DHS.GOV  
TNWG01A-V3457.AD.CBP.DHS.GOV - CBP-EDME-NPE-CA5.CBP.DHS.GOV  
TNWG01A-V3453.AD.CBP.DHS.GOV - CBP-EDME-NPE-CA6.CBP.DHS.GOV  
TNWG01A-V3452.AD.CBP.DHS.GOV - CBP-EDME-NPE-CA7.CBP.DHS.GOV  
TNWG01A-V3567.AD.CBP.DHS.GOV - CBP-EDME-NPE-CA8.CBP.DHS.GOV
    
Most Servers are running Windows Server 2019  
TNWG01A-V1650.AD.CBP.DHS.GOV  
CBP-NPE-CA1.CBP.DHS.GOV Online Root internal NPE CA  
Issues Root Certificate to self  
Issues SubCA to CBP-NPE-EDME-[ CA2 - CA8]