ws-gw-na.vw.com

- Volkswagen Group of America -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 59:33:88:06:c2:e8:e7:cf:49:19:c5:48:51:66:25:93 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Volkswagen Group of America

Organization: Volkswagen Group of America
State / Province: Michigan
Locality: Auburn Hills
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 59:33:88:06:c2:e8:e7:cf:49:19:c5:48:51:66:25:93
Serial Number (int): 118568857708039517996150127665820870035
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: af:b8:c9:c9:bd:af:42:7f:45:fb:e0:1d:8f:1a:ea:d9:94:ba:b4:6d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): be:03:31:c7:c5:ce:26:5a:4e:f8:3b:cc:fe:10:11:3e:48:17:89:4a
Fingerprint (sha256): 2c:e2:65:d6:bc:03:16:60:55:6e:70:83:0a:18:00:1d:10:ee:b7:ed:02:4b:10:49:72:a8:7c:f3:61:ff:4c:3e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ws-gw-na.vw.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ws-gw-na.vw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ws-gw-na.vw.com
www.ws-gw-na.vw.com

Other certificates including the domain name vw.com

(limited to 100 certificates)
Revproxypool1.vw.com
owp-int.vw.com
cnp-qa.vw.com
drivergear.vw.com
mdmac.vw.com
magazine.vw.com
access.vw.com
www.volkswagen.ca
ahshuttle.vw.com
b72e13222821ba90.cajwtsign.dev.vw.com
media.vw.com
www.drivergear.vw.com
view.em.vw.com
Revproxypool1.vw.com
rastc.vwgoasra.com
access.vw.com
akamai-san212.exacttarget.com
b-h-m.spc.us00.p.con-veh.net
qa-deploy.vw.com
imperva.com
update.vw.com
imperva.com
Revproxypool1.vw.com
newsroom.vw.com
akamai-san156.exacttarget.com
cnws-qa.vw.com
click.cn.vw.com
ows-int.vw.com
cnws-qa.vw.com
cnws.vw.com
parts.vw.com
acms-api-qa.vw.com
vwupgvehicle-roadside-api-qa.vw.com
drivergear.vw.com
vwdesigns.vw.com
cloud.cn.vw.com
akamai-san156.exacttarget.com
cns-int.vw.com
vwgoaconfigmgrcmg.vw.com
cnp-int.vw.com
www.vw.com
www.vw.com
vwupgvehicle-vcms-api-prod.vw.com
myvw-jwtsign-www.vw.com
parts.vw.com
vwgoa.vw.com
erwin.vw.com
go.vw.com
vomscarnet.vw.com
erwin.vw.com
smetrics.vw.com
owp-qa.vw.com
rp.vw.com
Revproxypool1.vw.com
vw.vwag-k-iz-temp.vw.com
st-qa.vw.com
USMIAH1VCSE01.vw.com
smetrics.vw.com
dealers.vwemissionsinfo.ca
newsroom.vw.com
closer.vw.com
view.cn.vw.com
mobilemail2.vw.com
www.vw.com
vwgrouplmc.vw.com
www.volkswagen.ca
ws-gw-na.vw.com
myvw-jwtsign-qa.vw.com
api.vw.com
odismail.vw.com
ws-gateway-cert.vw.com
cns.vw.com
ws-gw-na.vw.com
www.vw.com
ws-gateway-cert-qa.vw.com
ngw6-prod.vw.com
www.vw.com
parts.vw.com
cnp-int.vw.com
mig.vw.com
imperva.com
newsroom.vw.com
parts.vw.com
access.vw.com
cns.vw.com
smartfleet.erl.vw.com
cns-qa.vw.com
access.vw.com
access.vw.com
USMIAH1VCSE02.vw.com
Revproxypool1.vw.com
appsxdev.vw.com
Revproxypool1.vw.com
go.vw.com
recall-qa.vw.com
deploy.vw.com
vwupgvehicle-acms-api-prod.vw.com
www.drivergear.vw.com
smetrics.vw.com
br2.vw.com

Certificate

The complete raw certificate details for ws-gw-na.vw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPzp0ZiLgCZUCTK6FmgB
NdNfdgkpqhmRYuhV+/29loAIPHrZsSiO2g5hJLkD2cV9oHdPdTSwC2n6Sqwvaan1
f6f99smPSowlbPg+2eSQ3Ii0RZ1RUj3P7CEcyqQCBaKspb4MccI3NpnPmpGAOk/q
X6bYQ3ATL8dLhS+wxtL3tqCLLq9a1uwABfAVx4IMXIF1HEjRbP5XbdZGWLKPgt+m
OOjyigqaMRe0hYANo/bG+U6z405kAUeE9Jvqdw58+hQzG7FavcRdj+phHu5Gt7Qa
rUf0J1niRcwNzNaRj2gIsgIHwZl56Suw0EevEQJwrs2Rc92fN28zCXP9ZRLLy6mv
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118568857708039517996150127665820870035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 16:27:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 16:27:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auburn Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volkswagen Group of America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ws-gw-na.vw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23352564337061172656191470919397769764871669805213958834887343872188887034258488617830932944542742588207840844055681293928064412858738242028848800796738042176591318370718369900857242754689558862125740044835882884743716467436070153504753242970245888114091206422544174282768104017714096690847707096992994948222940530383043668007577125891730460295840066250075843752728199654938044337216561477108301085577296690304892045008816952389162029864523857499463746667875418397484898235334669858354909420238976002448151853133467492657126926972705768020379803353727186929978026448119674437738143529406762496634403986354443458817837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afb8c9c9bdaf427f45fbe01d8f1aead994bab46d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-gw-na.vw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ws-gw-na.vw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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