m.audibank.de

- Volkswagen Bank GmbH -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 7c:ef:05:22:e0:f5:81:00:6a:22:02:b9:e8:46:fe:fa:01:d6:de:bb was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Bank GmbH

Organization: Volkswagen Bank GmbH
Organization unit: IH-IOIT
State / Province: Niedersachsen
Locality: Braunschweig
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:ef:05:22:e0:f5:81:00:6a:22:02:b9:e8:46:fe:fa:01:d6:de:bb
Serial Number (int): 713245181114656854298725455146321593155292946107
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 80:ec:64:be:23:af:7f:f9:2f:9f:93:90:0b:86:90:88:e4:22:9c:ac
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 8e:b2:aa:fa:7c:c6:f4:46:b1:a3:d5:f9:39:79:03:e5:5b:42:5f:80
Fingerprint (sha256): 30:d4:4f:dd:c3:ab:42:15:1b:a9:46:aa:de:73:fc:6c:8d:fe:88:4c:28:a0:3f:14:4f:38:95:27:6a:64:8f:2e

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate m.audibank.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m.audibank.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m.audibank.de

Other certificates including the domain name audibank.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for m.audibank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWY9KCcbEjg/o0mqO/2z
2ZNUN8rc4QBsaw0Lr879KpkZmM9q3nkC1zweASeINS8KEH0XKzd7LqqJv33WUXgi
B8SO3Fmj0pobY4G4ABTeWCWFCHEnKsaFy6z7UZo9FH0FRLqpg5A5gNxFfCbHASh0
hG4h4is2QQQe4AlwDIox4oy3HRxXITvYcf9/4y3Fgo622rHcFYG4zZmxc8nDMLX4
Y3/uI/oTx31O9LCZMnBz/vlRxx8hRm0dJN67xJ/z4CbUrAbgy7hkTchXR+uH8fJG
U1LrVA8Cddsw8XorCbBQghnIdCv04VRAV44rUUVQ3wYYMyO+0R2lj57s7Uz/R4Lm
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 713245181114656854298725455146321593155292946107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 07:04:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-08 07:13:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Braunschweig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Volkswagen Bank GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IH-IOIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'm.audibank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24919361955937129524256963940760501317157232151718491713234524558397974926470640512730233177713074191646963138552846495717595993646811330648600801455032361256977662025933687665843733000892676605121010608901778246600525194678460549570117784581012932793252712137693128537206346807338113209193132026400310539363866737138831039025733984251162189787032141464268577250767811354460701172352155918941913889690307858282573792927771864998671614234998206331629992699547638112657811823211447812292435980946378894679172269751134115452519533168836992966416380910821276514582015821919471850077489493238345626412433165763940731512411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.audibank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80ec64be23af7ff92f9f93900b869088e4229cac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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