www.vwfsag.com

- Volkswagen Financial Services Digital Solutions GmbH -

Issued by DigiCert QV TLS ICA G1

About this certificate

This digital certificate with serial number 0e:3b:ff:8c:b2:6e:07:c3:7b:9f:60:60:f8:ca:7c:29 was issued on by DigiCert, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Volkswagen Financial Services Digital Solutions GmbH

Organization: Volkswagen Financial Services Digital Solutions GmbH
State / Province: Niedersachsen
Locality: Braunschweig
Country: DE

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:3b:ff:8c:b2:6e:07:c3:7b:9f:60:60:f8:ca:7c:29
Serial Number (int): 18920720617255410474647418233256836137
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3b:58:08:a0:ed:ee:98:23:ca:37:2a:fb:d0:df:21:1e:24:11:1f:4c
AuthorityKeyId: c8:60:3d:11:dd:06:56:10:e0:a9:a1:c8:f8:b1:70:2a:e7:4c:4c:69

Fingerprint (sha1): 51:00:79:5f:e3:3c:00:e7:d0:53:2f:b5:d6:d0:4d:b2:7e:60:ba:c8
Fingerprint (sha256): 68:f4:8c:5d:ef:a4:46:ec:c3:eb:6c:5d:2d:95:eb:d7:c9:96:88:8e:db:cb:5e:30:68:6b:51:42:b3:1b:20:62

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertQVTLSICAG1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertQVTLSICAG1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertQVTLSICAG1.crl

Check the revocation status for certificate www.vwfsag.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vwfsag.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vwfsag.com
www.vwfsag.de
www.kurzzeitschutz.de
www.vwbank.ie
www.chargeandfuel.com
www.vwfs.co.uk
www.volkswagenbank.de
www.vwfs.tw

Other certificates including the domain name vwfsag.com

(limited to 100 certificates)
auth.vwfs.com
auth.vwfs.com
auth.vwfs.com
zvc-k.vwfsag.com
vwfsag.com
www.vwfsag.de
www.vwfsag.de
vwfs.com
vwfsag.com
auth.vwfsag.com
www.vwfsag.com
auth.vwfs.com
www.vwfsag.de
auth.vwfsag.com
www.vwfsag.de
vwfs.com
www.vwfsag.de
auth.vwfs.com
zvc-k.vwfsag.com
www.vwfsag.de
zvc-i.vwfsag.com

Certificate

The complete raw certificate details for www.vwfsag.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18920720617255410474647418233256836137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DigiCert QV TLS ICA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Braunschweig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volkswagen Financial Services Digital Solutions GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vwfsag.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 582925501331677882636379213921336355894175592119376386746318080178661387724447640297800459774092449006375161409396519779437050682433577635054766461343500661392974193427078649513375381390137169011973935409287838895265845993306604058125441359306493395211965518484106505999689357437309669030829802308488800204499895331161537883116337259475745177456059744108149161846003278625172303567232087798705298686520503701892832832591219343861000240035720754087327211001546840620742927417836916821383058093111054230318863100961294988625296384723282145554161931210294158377862012549885157031529174813649859090312239611346945100016127073024179935686798136171026403872934963033879823663080291161247983574788520796064075454120249314783963720021900255663244157789049964069269051109650307908396675191861303105313205213622989205277355974184101590399468312608824807055001486233189910310713104999115057418051184341129646246238229238018288772377278688576574357425313689258812924471890670787153737832726366038741023367439785709369109150082132128895064430836462938191888983570329218521817639025523722091772586971156497982893878865331856926243282182960432018171901421247028778625244846005182836639350506520420821968341447692959624372863636226232397174418561107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8603d11dd065610e0a9a1c8f8b1702ae74c4c69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b5808a0edee9823ca372afbd0df211e24111f4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwfsag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwfsag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kurzzeitschutz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwbank.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargeandfuel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwfs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volkswagenbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwfs.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertQVTLSICAG1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertQVTLSICAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertQVTLSICAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00cd8a0381cbfe3540ac98612b931256db44d5899fc966abbf29297d3ae366ac9093388dbc68cb91978b14bc2018925102666bbd307ee6d2f62e76adac4424c150865b738cb2eb9d53867c1901b90b74e86ec26ae010d99c3787ceeea2c9b29c99aae84e0a0be6c9a834d3a4e072e76a7416ce6101c35fcb117ffa8d037819e2f9b3af8a2d888c8e232f8b55cc0f71559c9a437053ef7d01ffa97d989a5be094b2657427ae247697a4de15994d02c15ff4e6b06b6ea9cb94625e9825f59743b6a6367220c3968d8cf99fe7501bca2f77858dd39143ebc42019d159b64c05f83f238fcc730a4440c7655b35af78a1d53472447feb8987adce77d9ed7c97c6086916