test2-psapisandbox-incardelivery.volvocars.com

- Volvo Car Corporation AB -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:f6:fe:74:91:02:70:ac:07:39:c5:24:7e:22:d5:2c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volvo Car Corporation AB

Organization: Volvo Car Corporation AB
Locality: Gothenburg
Country: SE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:f6:fe:74:91:02:70:ac:07:39:c5:24:7e:22:d5:2c
Serial Number (int): 15903973948218097731652213507210007852
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4c:f0:c7:21:60:46:ce:23:d4:95:0c:2d:d7:36:0b:13:a4:15:73:fd
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 2d:7e:3c:6a:7f:22:a7:47:6b:32:64:ec:8b:80:78:8b:1c:c2:55:2d
Fingerprint (sha256): 08:f4:d7:48:1c:02:e5:0a:8d:f9:21:22:61:97:70:c6:89:9a:0e:e6:e2:cf:1b:75:85:94:06:44:65:a9:3b:02

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate test2-psapisandbox-incardelivery.volvocars.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test2-psapisandbox-incardelivery.volvocars.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test2-psapisandbox-incardelivery.volvocars.com

Other certificates including the domain name volvocars.com

(limited to 100 certificates)
swat.volvocars.com
eid.volvocars.com
ssl3.ipaper.io
ssl4.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
test2-incardelivery.volvocars.com
ssl3.ipaper.io
contentstore.volvocars.com
ssl4.ipaper.io
qacontentstore.volvocars.com
www.volvocars.net
www.volvocars.net
www.volvocars.net
qa-partner-incardelivery.volvocars.com
*.volvocars.com
ssl4.ipaper.io
contentstore.volvocars.com
*.eu.test.c3.volvocars.com
ssl4.ipaper.io
qa-cars.digitalcommerce.volvocars.com
san1.yext-cdn.com
media.volvocars.com
investors.volvocars.com
live.volvocars.com
poznajvolvo.volvocars.com
dct.volvocars.com
image.mktmarathonkids.org
ssl4.ipaper.io
test2-psapisandbox-incardelivery.volvocars.com
moyya.volvocars.com
o365.mail.volvocars.com
dctcloudqa.volvocars.com
ssl4.ipaper.io
cepinet.eu.qa.volvocars.com
media.volvocars.com
test-accessories.digitalcommerce.volvocars.com
www.volvocars.net
ssl4.ipaper.io
ceplog.eu.test.c3.volvocars.com
jobs.volvocars.com
poznajvolvo.volvocars.com
ssl4.ipaper.io
volvocars.com
cepinet.eu.qa.volvocars.com
jp.volvocars.com
ssl3.ipaper.io
www.media.volvocars.com
*.origin.volvocars.com
san1.yext-cdn.com
investors.volvocars.com
vbsbackendproxy-test-client.volvocars.com
usdealers.volvocars.com
auth-wcs.vapi.volvocars.com
www.media.volvocars.com
analytics-cn.volvocars.com
igw.api.volvocars.com
cepinet.cn.volvocars.com
*.qa.consumer.api.volvocars.com
usparts.volvocars.com
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
payment.qa.digitalcommerce.volvocars.com
ssl4.ipaper.io
am1050dl50se01.050d.dedicated.lync.com
dc-vapi-fp-nordea-prod.vapi.volvocars.com
volvocar.at
ssl4.ipaper.io
image.mktmarathonkids.org
www.volvocars.net
poznajvolvo.volvocars.com
www.media.volvocars.com
cepmetrics.c3.volvocars.com
analytics-cn.volvocars.com
paymentnotification.digitalcommerce.volvocars.com
ssl4.ipaper.io
*.qa.consumer.api.volvocars.com
ssl3.ipaper.io
authentication-tool.consumer.api.volvocars.com
ssl4.ipaper.io
usdealers.volvocars.com
vbsbackendproxy-test.volvocars.com
ssl4.ipaper.io
www.volvocars.com
ssl3.ipaper.io
ssl3.ipaper.io
auth-wcs.vapi.volvocars.com
meet.volvocars.com
ssl4.ipaper.io
ssl4.ipaper.io
ssl4.ipaper.io
poznajvolvo.volvocars.com
www.volvocars.net
ssl4.ipaper.io
jobs.volvocars.com
vcl-cdn-emea-live.volvocars.com
ssl3.ipaper.io
admin-incardelivery.volvocars.com
volvocar.at

Certificate

The complete raw certificate details for test2-psapisandbox-incardelivery.volvocars.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJY+aAurIwO493Swj0x+
mJdhQIB7A4ZpPyZn4S9rchNXX/A1ghxFfTzkG+VD0CNIuMI00paM+7mkLx3NSDZJ
yM1WEJfei2Gff1rtb/RetWquBRpv2T6rg7FQ2rzALijKQ2Zz7OltlxzOL/08AE7k
yOC2RlpOOU44NfupfIRYp7AuvV/Vtl0oAcYW/j3iRr+QrVwuh8jE7kcOPmnzAYri
Fa15vmwm1jGRK8+T0/jo3B6MZVBzZwbHBn++3+bo3ra6uMkhEP89MRr5rM2iUsut
Oaekyx1HruQcOXkYylt5L5SCetc9kmuB5lN8W18glGirAAi7IxedkRk2vbqoqtls
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15903973948218097731652213507210007852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gothenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volvo Car Corporation AB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test2-psapisandbox-incardelivery.volvocars.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20777169981236475368791855812668230933051565907208044299236949091865341513889862658393379783392890609664033634175399301154042122391489634396881173988347830962272407046188399898548468028715293332151776403473933255324892462036658673990297123227287337049791567028048647100345141238697931224158463572281566997781037585338133958946456695863889460703420636944165944894722569664352784937607960126759060148589362132843299509137644515150315163318209572467624637517226986481494652781162302451034719213241221150916075365982188030047437750947232130306614484045764714176269419888087430119629407650048886287812006158971111323823337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cf0c7216046ce23d4950c2dd7360b13a41573fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2-psapisandbox-incardelivery.volvocars.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004e978335eaded59989447e3323acf09be6b210c2d233101d3c79bd2afb96b2c95b652f42a27a6726e453beae8e50497fb04512b24c8263f601e2c71e62d78a14c172dfd96d62264a3cdbb211c6aff3bbb4b46a8ecb82b856960333164834cc449dbeebfe348ca47655928239e576f536847f5456a570283344b1441c6e73fac034a94407525f7e8120962b3a4996b1814e260d2d080ac3b36d614b8d5dc08ff0f36737fc2de98bd22d16d6fa7c7415e6c19665abe34182fe385a18707762a7359c1d9e2632cd0f4e1f490a9a96b5f8f6ada8d071bbb1f4d4bacf19f7665bcf6bf55aa9eee5e86d2c3b42989db6a27307745c4250a90ce5121fb52e186d2363c8