lyncdiscover.vwfs.com

- Volkswagen Financial Services AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 37:c3:34:0d:4a:45:d2:b5:4d:01:c0:47:13:be:78:87:7e:0b:d9:0d was issued on by QuoVadis Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Financial Services AG

Organization: Volkswagen Financial Services AG
Organization unit: IH-IOIT
State / Province: Niedersachsen
Locality: Braunschweig
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 37:c3:34:0d:4a:45:d2:b5:4d:01:c0:47:13:be:78:87:7e:0b:d9:0d
Serial Number (int): 318347672070289280691917350130153281052843170061
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 20:32:2b:38:c8:9f:97:43:72:d3:24:f1:ea:44:9d:3c:5e:80:db:90
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): e8:f3:46:91:f3:16:da:88:5b:40:1b:44:cd:81:3d:06:e8:84:90:db
Fingerprint (sha256): 06:6f:72:1a:be:89:fc:55:50:88:1d:a3:c8:96:0a:ac:e0:fe:b9:57:62:5b:c7:0a:9b:c7:5e:ca:04:41:99:2e

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate lyncdiscover.vwfs.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncdiscover.vwfs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncdiscover.vwfs.com
join.vwfs.com
dialin.vwfs.com

Other certificates including the domain name vwfs.com

(limited to 100 certificates)
fleetonline-i.vwfs.com
ras-mx.vwfs.com
signin-i.vwfs.com
git.vwfs.com
www.karriere.vwfs.com
karriere.vwfs.com
lyncdiscover.vwfs.com
posfr.vwfs.com
cmsvw.volkswagenfinancialservices.pt
www.vwfsag.de
dsm.vwfs.com
auth.vwfs.com
apac.webaccess.vwfs.com
isafrance.vwfs.com
sync.vwfs.com
milesweb-p.vwfs.com
www.vwfsag.de
tmt-kons.vwfs.com
collaboration.vwfs.com
tmt.vwfs.com
ibaidp-i.vwfs.com
employee-www.vwfs.com
miles-cons.vwfs.com
webaccess.vwfs.com
access.vwfs.com
auth.vwfs.com
pos-int.vwfs.com
sharepoint.vwfs.com
lzi-gp.vwfs.com
lzi.vwfs.com
af-sandbox.vwfs.com
milesweb-p.vwfs.com
auth.vwfs.com
ibasts-i-02.vwfs.com
sip2.vwfs.com
karriere.vwfs.com
collaboration.vwfs.com
guestaccess.vwfs.com
isafrance.vwfs.com
www.pricing-tool.vwfs.com
guestaccess.vwfs.com
apis.vwfs.com
ibasts-k.vwfs.com
isafrance.vwfs.com
milesweb-k.vwfs.com
ras-europe.vwfs.com
dsm.vwfs.com
apis-kons.vwfs.com
www.vwfsag.de
apis-kons.vwfs.com
vwfshellas.vwfs.com
www.karriere.vwfs.com
EMEA-DE-WEB1.vwfs.com
signin-i.vwfs.com
sfe-kons.vwfs.com
vrent.vwfs.com
vwfshellas-cons.vwfs.com
collaboration.vwfs.com
access-en.vwfs.com
tmt-kons.vwfs.com
workplace.vwfs.com
webaccess.vwfs.com
india-lsi.vwfs.com
access-new.vwfs.com
karriere.vwfs.com
collaboration.vwfs.com
fleetonline.vwfs.com
signin.vwfs.com
mobile.vwfs.com
apis-int.vwfs.com
ras-sgp.vwfs.com
karriere.vwfs.com
posfr.vwfs.com
milesweb-p.vwfs.com
mobile.vwfs.com
sharepoint.vwfs.com
ras-brazil.vwfs.com
webcalc-broker-test.vwfs.com
mobile-c.vwfs.com
access-en.vwfs.com
access.vwfs.com
vwfs.com
milesweb-k.vwfs.com
git.vwfs.com
milesweb-p.vwfs.com
digital-workplace.vwfs.com
sync.vwfs.com
autovermietung.vwfs.de
milesweb-p.vwfs.com
posfrkons.vwfs.com
Lyncdiscover.vwfs.com
mobile.vwfs.com
milesweb-k.vwfs.com
karriere.vwfs.com
usedcars.vwfs.com
auth.vwfs.com
collaboration.vwfs.com
www.pricing-tool.vwfs.com
pos-india-u.vwfs.com
karriere.vwfs.com

Certificate

The complete raw certificate details for lyncdiscover.vwfs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5W8TIOwVpH72W6YYArpp
QMJRai3UhhuHJk6MIVrWUGq/VZqtbeqXOx8WdZNMxKVeYSbpNwMJ5H6Z967JDUat
KKP0HhShdm0uCcpe/STioDNPRZnaf9ybLC+dY5N1/RNUAt2H6N9XDHN/DqP7xYn6
jbPC1Bs2FkYDqtcYCYMAN7pVo58X2g3Nr4fGcBK+p9uVxJ21/KyfIL/VpWEWwZOB
SiMlQUDo/oJe/6NNLhkuLFvS/5ErcYlwXvdL+hAlXviKb2YbRMbmRFr1vUbJs/W8
8pzsG1fIYy24Ke+snaU1KMog5YjkgKLDQGRNwRWdB/JD6cE1vDz5tTuHUEJMAUp3
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318347672070289280691917350130153281052843170061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-26 07:23:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 07:33:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Braunschweig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Volkswagen Financial Services AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IH-IOIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lyncdiscover.vwfs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28963344823620465731434250562803724546905414971641685453652516193229275747073845351832757159878524998421216540714024454857772249613240932597947172922793728195338647638726060349196757633832041007050140848527412429913704204966676909165785851301808108792255457043437221806232404278305512160237588859771559049451049363100327961845417901926581733534805621258631792888365535264340272320330440779216412833267277398333526643670547832704067584383945052099172535314645218668143438060579057818245127376732722861566803032146117790191012156497465501924605803909784079666909389390215455712954480279089535469500141173325823056967573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.vwfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.vwfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.vwfs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20322b38c89f974372d324f1ea449d3c5e80db90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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