kontowechsel.audibank.de

- Volkswagen Financial Services AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 1f:cc:0e:74:70:1e:fc:5f:b0:9e:37:71:90:7f:a6:70:6d:05:cd:02 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Financial Services AG

Organization: Volkswagen Financial Services AG
Organization unit: IH-IOIN
State / Province: Niedersachsen
Locality: Braunschweig
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:cc:0e:74:70:1e:fc:5f:b0:9e:37:71:90:7f:a6:70:6d:05:cd:02
Serial Number (int): 181529325109831303026638376728653077466468175106
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 88:a4:23:9c:fe:79:e6:9e:47:4a:d8:93:3b:0d:8b:46:ae:a8:e6:a9
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 6e:fa:bd:3a:e6:cf:47:ff:38:95:06:74:e0:9d:ed:93:10:9c:45:2e
Fingerprint (sha256): 5a:e6:ba:2b:80:bd:38:53:08:f0:9b:8f:95:b9:7d:73:5b:97:c8:1e:e1:44:b7:3d:11:13:16:a8:dd:4e:5b:b0

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate kontowechsel.audibank.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kontowechsel.audibank.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kontowechsel.audibank.de

Other certificates including the domain name audibank.de

(limited to 100 certificates)
m.audibank.de
verifiedbyvisa.audibank.de
hypothekenservice.audibank.de
baufinanzierung.audibank.de
verifiedbyvisa.audibank.de
www.audibank.de
m.audibank.de
www.audibank.de
int.volkswagenbank.de
baufinanzierung.audibank.de
m.audibank.de
m.audibank.de
online-banking.audibank.de
ssl.audibank.de
verifiedbyvisa.audibank.de
verifiedbyvisa.audibank.de
hypothekenservice.audibank.de
www.wunsch-pin.audibank.de
kontowechsel.audibank.de
audibank.de
kontowechsel.audibank.de
kontowechsel.audibank.de
kontowechsel.audibank.de
vwfs.com
int.volkswagenbank.de
vwfsag.com
kons.audibank.de
kons.audibank.de
www.audibank.de
vwfs.com
hypothekenservice.audibank.de
m.audibank.de
kons.audibank.de
kontowechsel.audibank.de
www.pinwahl.audibank.de
online-banking.audibank.de
int.volkswagenbank.de
www.audibank.de
m.audibank.de
hypothekenservice.audibank.de
audibank.de
www.audibank.de
www.audibank.de
baufinanzierung.audibank.de
hypothekenservice.audibank.de
m.audibank.de
baufinanzierung.audibank.de
kontowechsel.audibank.de
hypothekenservice.audibank.de
ssl.audibank.de
hypothekenservice.audibank.de
baufinanzierung.audibank.de
hypothekenservice.audibank.de
hypothekenservice.audibank.de
www.audibank.de
www.audibank.de

Certificate

The complete raw certificate details for kontowechsel.audibank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus7BEGdGcCYZ/BBk2FIp
vqAwWVaigWUbp3qKNwLt4Ulmb+MfxpmM4y4hTr0fp/7mQXdln9kdEazzRjYVdy3y
Vs/82dmOs8h3ty1jcrLd+jjK6tA+WW5kB36KuM34q6s4DN1bOatBW9hexONdORog
Q21A2EmAAAPxvz4rLYrusnZSae2OMM0Dtj5bLRGKbhCNfs/aLhfDWDn/iZdmpLML
dj0cMFuGLqqBuGCHWC34Tiyazf2DzgN41OtmEUMc8hMxISBQ0qfwBjI2uGuF5YCQ
DlFNhBtXlXTCseaDuYpcSUpddDBF0uOGh0AewveBIybuZosjkxE/VRZflcg7jgxQ
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 181529325109831303026638376728653077466468175106
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-29 09:29:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-29 09:39:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Braunschweig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Volkswagen Financial Services AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IH-IOIN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'kontowechsel.audibank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23582278998167733796460942102373358457279640030317509957228827866799773417695105297752180803282727271731229951753666316768709273929128050090484048887675197839541495212296176112023081710318430560496601082593965755402278896327181606597020993127868292275715792600523382524923538335596768690161872278584479662875970961445771554364070814220889508784359663848001729799714511810652605450968458573767570819706487147704380561388344660958680366734153338819403592440527393364673514248866209694765034006756456770115459132503241015051592743369534950337597071552980126367117693375288500878014621314036697932514714477079104204853471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kontowechsel.audibank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88a4239cfe79e69e474ad8933b0d8b46aea8e6a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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