auth.vwfsag.com

- Volkswagen Finance (China) Co., Ltd. -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 56:c9:44:01:ee:a3:c0:9a:15:0d:c6:c0:c9:d0:7f:fa:61:03:51:5a was issued on by QuoVadis Limited.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Finance (China) Co., Ltd.

Organization: Volkswagen Finance (China) Co., Ltd.
Organization unit: IT
State / Province: Hebei
Locality: Beijing
Country: CN

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 56:c9:44:01:ee:a3:c0:9a:15:0d:c6:c0:c9:d0:7f:fa:61:03:51:5a
Serial Number (int): 495461580368687094768257409550739336632163586394
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 45:60:38:eb:fd:5a:0f:e6:b1:45:1d:de:1f:5e:db:6d:c0:be:80:32
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 90:cc:b6:d1:14:dd:ab:a3:09:88:1a:5b:d5:60:7e:28:c8:80:41:d7
Fingerprint (sha256): 67:3c:5a:24:36:9b:18:e0:bc:12:19:1a:ce:2b:1f:29:d7:d5:08:98:90:70:1e:27:e9:5c:3d:fc:78:1b:5e:07

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate auth.vwfsag.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.vwfsag.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.vwfsag.com
enterpriseregistration.vwfsag.com
certauth.auth.vwfsag.com
auth.vwfs.com.cn
enterpriseregistration.vwfs.com.cn
certauth.auth.vwfs.com.cn

Other certificates including the domain name vwfsag.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for auth.vwfsag.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMf2xUBEaSMzJryirb9L
0ki0zujoEFE/MSFvNkojElkSXjuVC/ZYUFaT/CFO3vJjQeGTjNGox+qChtAGGyIs
kPNvaazblKuQ8AybLC7C74DUGp4D06RbD2aXnmPCxMw9bKH5Y4Oj6YWDPfX8GBkl
kc7M8Y6mA+8PJLQ1czi+dvqIXpXAltrRGVqBef0ugrb8uDIwv0h0EXlxW8x8R9Uw
CXqksaoP0pTdejcCaVJODG0ZQ6t8YSXj3WG7Nx4zpI9J5qQTp2yUEsHqm/PUAyxd
5EFLDaZitDfB/CWpXMmz/zGo6UQ4pY+Q+JOpZIMpO0+ecCQOUMgHCVbJhwTs4tr+
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 495461580368687094768257409550739336632163586394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 13:20:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-30 13:29:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hebei'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Volkswagen Finance (China) Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'auth.vwfsag.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20801687911945325213373198413722622941463125134003392251410151710627926750065093814729513429420585011088725908882485432250279691865876997646388720423381184963416193716257264131821444426710683611367458256152602518544394871246165082134996033162099637387206554827398205406030619750308995645786046708907150024965649459194978947617230783158612440248073446990174343563555783557751675691638684957079806781820221652945023949303007239170731251720111262408332439332115065160041399603871920571197282118860598339432768209611356506302696200432142574617628440626637670529950583546388379836702908494889915211162442870226576056450591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.vwfsag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.vwfsag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certauth.auth.vwfsag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.vwfs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.vwfs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certauth.auth.vwfs.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							456038ebfd5a0fe6b1451dde1f5edb6dc0be8032
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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