*.origin.volvocars.com

- Volvo Car Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:57:14:cc:39:c2:86:ec:0a:95:43:74:32:17:9c:b2 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volvo Car Corporation

Organization: Volvo Car Corporation
Locality: Gothenburg
Country: SE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:57:14:cc:39:c2:86:ec:0a:95:43:74:32:17:9c:b2
Serial Number (int): 16402887604724560741985988715361049778
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 50:8d:de:f9:9d:1a:57:ad:25:ce:f2:68:1c:08:90:fc:2d:75:6f:21
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): f0:f2:3d:3a:29:3f:d6:3e:98:ac:e3:05:44:bc:37:c8:05:ba:54:3f
Fingerprint (sha256): 0e:3b:1b:a7:bb:66:c6:77:ea:e4:31:a0:5c:3c:b6:86:07:1c:04:b3:00:0c:a9:af:f9:40:4c:1a:f5:33:a3:04

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.origin.volvocars.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.origin.volvocars.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.origin.volvocars.com

Other certificates including the domain name volvocars.com

(limited to 100 certificates)
swat.volvocars.com
eid.volvocars.com
ssl3.ipaper.io
ssl4.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
test2-incardelivery.volvocars.com
ssl3.ipaper.io
contentstore.volvocars.com
ssl4.ipaper.io
qacontentstore.volvocars.com
www.volvocars.net
www.volvocars.net
www.volvocars.net
qa-partner-incardelivery.volvocars.com
*.volvocars.com
ssl4.ipaper.io
contentstore.volvocars.com
*.eu.test.c3.volvocars.com
ssl4.ipaper.io
qa-cars.digitalcommerce.volvocars.com
san1.yext-cdn.com
media.volvocars.com
investors.volvocars.com
live.volvocars.com
poznajvolvo.volvocars.com
dct.volvocars.com
image.mktmarathonkids.org
ssl4.ipaper.io
test2-psapisandbox-incardelivery.volvocars.com
moyya.volvocars.com
o365.mail.volvocars.com
dctcloudqa.volvocars.com
ssl4.ipaper.io
cepinet.eu.qa.volvocars.com
media.volvocars.com
test-accessories.digitalcommerce.volvocars.com
www.volvocars.net
ssl4.ipaper.io
ceplog.eu.test.c3.volvocars.com
jobs.volvocars.com
poznajvolvo.volvocars.com
ssl4.ipaper.io
volvocars.com
cepinet.eu.qa.volvocars.com
jp.volvocars.com
ssl3.ipaper.io
www.media.volvocars.com
*.origin.volvocars.com
san1.yext-cdn.com
investors.volvocars.com
vbsbackendproxy-test-client.volvocars.com
usdealers.volvocars.com
auth-wcs.vapi.volvocars.com
www.media.volvocars.com
analytics-cn.volvocars.com
igw.api.volvocars.com
cepinet.cn.volvocars.com
*.qa.consumer.api.volvocars.com
usparts.volvocars.com
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
payment.qa.digitalcommerce.volvocars.com
ssl4.ipaper.io
am1050dl50se01.050d.dedicated.lync.com
dc-vapi-fp-nordea-prod.vapi.volvocars.com
volvocar.at
ssl4.ipaper.io
image.mktmarathonkids.org
www.volvocars.net
poznajvolvo.volvocars.com
www.media.volvocars.com
cepmetrics.c3.volvocars.com
analytics-cn.volvocars.com
paymentnotification.digitalcommerce.volvocars.com
ssl4.ipaper.io
*.qa.consumer.api.volvocars.com
ssl3.ipaper.io
authentication-tool.consumer.api.volvocars.com
ssl4.ipaper.io
usdealers.volvocars.com
vbsbackendproxy-test.volvocars.com
ssl4.ipaper.io
www.volvocars.com
ssl3.ipaper.io
ssl3.ipaper.io
auth-wcs.vapi.volvocars.com
meet.volvocars.com
ssl4.ipaper.io
ssl4.ipaper.io
ssl4.ipaper.io
poznajvolvo.volvocars.com
www.volvocars.net
ssl4.ipaper.io
jobs.volvocars.com
vcl-cdn-emea-live.volvocars.com
ssl3.ipaper.io
admin-incardelivery.volvocars.com
volvocar.at

Certificate

The complete raw certificate details for *.origin.volvocars.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD9CzXKFcn6/u0Xf7tM8
0uWQLLmYsPzmduMAq650SwxW9Jix1J3DVtvdsbfQvbIyjEY+kYeQLIG7yFtuwYXH
ahU1MzFm5hkt1n5aaKI9JT9h/lfaxGW6hpI9GGaMehJx+1khXTVYZysFKDGrpaMB
kkj5nT37yEuZt5Ip3dnutB4izMEVFjfbmkbRREC1W8boilKRGNruAZeyrMadus46
DaNkSydFO29yNKMb6Er3Y73tLuWZvXqNYvytf7DxuAsRCmmRl+EzfIG1HhYxjlh6
qedJG8MykmG247dVcXFNnGHsaVYqpYykbq7DuzZaTaKa6blGwQgmRWDbQXe1Yptq
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16402887604724560741985988715361049778
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gothenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volvo Car Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.origin.volvocars.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20229323930379985779614225574206769575464347806269449441296809936482597027759686043215052610162676138465940381546563426680070216634021336514162292741046309506411046553450300510749887237220336447563974936445599318728010073388313786243918847486246130390999392111966802764916706810753864458703868395377498645262175431065722968163980433812476993825161277203484018745908731222331629524186712227000515705612187718735280683165181853712117681023709005117648647302847692149900379803870501226364491284338748845071697430919605919956989760100672047197653897266792067404142848162883594158846878924087795917204813643639347069282869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							508ddef99d1a57ad25cef2681c0890fc2d756f21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.volvocars.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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