baufinanzierung.audibank.de

- Volkswagen Financial Services AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 24:af:a5:5c:5a:76:26:75:e2:1c:66:7e:e3:52:3d:75:d2:14:9b:62 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Financial Services AG

Organization: Volkswagen Financial Services AG
Organization unit: IH-IABW
State / Province: Niedersachsen
Locality: Braunschweig
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 24:af:a5:5c:5a:76:26:75:e2:1c:66:7e:e3:52:3d:75:d2:14:9b:62
Serial Number (int): 209440703112801569810384699190859830457712024418
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 2d:0f:af:0d:94:87:35:51:69:c8:a2:e8:b1:f0:d6:b0:dd:f1:10:53
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 93:20:6a:54:62:19:25:3b:79:bb:0e:b5:c6:ab:7b:0d:11:49:14:ec
Fingerprint (sha256): a7:e6:c3:0f:c9:47:84:ab:9f:22:79:f5:72:a0:5d:22:3b:f1:e8:18:1b:a6:59:42:c5:20:0c:97:89:d1:e1:57

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate baufinanzierung.audibank.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for baufinanzierung.audibank.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baufinanzierung.audibank.de

Other certificates including the domain name audibank.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for baufinanzierung.audibank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvvopAIK7qwb+N7RkYU5
UEAi/PmiUQHuoImPW28leBWh0qnO6oSf5R1rjd30tT+bsacrt00XaqYxYImYzBua
Dwqpn1Ba30/pyrpQmE6AJBHNp1PF3l7df1zbTWCmmXJawQ0G3zuhA528iRghQ0KK
vnaNN5bsgeeearRuXCsh+w5TNp/HS8rsqUlatsWTNinKM8sTrtSrOLfk2nRlfHSQ
t0i5IODsX2m0Jbf3i28ErCqChvRpGlhTsYhYY/6fkDKMnfU8b2Vj2Qrhmjgcr36T
sma+4EuCvyrJ1hNfejjc/ZD7iD+HnJGaKtPH1YGWF0LzamYSxJeZidKUW5YmjpOS
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 209440703112801569810384699190859830457712024418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 13:43:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-08 13:53:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Braunschweig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Volkswagen Financial Services AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IH-IABW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'baufinanzierung.audibank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22089685899757042889949068337959521364628221177350716416074196090144991608116605614966382941734960266240524563284830839215044837457088860584236865202823573416740474906008387118315808178251097645888104498576391866522570531934649430536767290021038480669703932678767430707842505580834286649805053841220145983858774390306407558861936013934271313360524161048143666064523840793201994974155202002710792463916036271701005457014743892849480276255664959022117030533155335950502881660280991489770294405362833417081857837874305977559189683388008849467151734126496311975867218399761068536583369936866504969426453781415282699637409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baufinanzierung.audibank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d0faf0d9487355169c8a2e8b1f0d6b0ddf11053
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		000391dc4820eb6230f2461463246d451f610f1220291670aef1f326e0bf48c1188109ac7b990f61ba0e6f7104a078232e553c0ed092b5d07ac7cb4b5569852707dda23a3fb7f64c0a7fb09ee47e99b099a346f46d8322dd7f3a2f74e1cb7dadbe54029560025abc28614788a8760f9d18dcc9e74012bfe5fce0c5067dd81c80ac0914682d3eabaddbb4d0f8961c99bd248f132637c61bb59fadd95037d78f424b810ac51a0d7b6f501b8c873d8d86609f18f16d4f8008ae4cfe63a840672b4ddc8fe351534b17b7c96fdf30bd01c100d28a214bd155cb0f123e58a0fc122eabb3a0edb746fa882b5abba7562ffe4ba6d64dc49351b0674839f623a563a0ef74ea03c87e4dea7d91eadfad0af85fd598eee8d8f5a5e192dc5d5fc97ea0ac421d0f87c7ccf6dd261a5f468bb979f86b8e309626b06a5bb56af77c72e5c26cf94fbfc1cca13b291042ac1f61589f0e152e6f2628de04ce0e51dec6819387ef13558989842f67fe09760413b01ad159a7bcfdb20779e08bc0fccef39b48d8fed28c48742936a0023ac38720131890d7a7e9b77b136cf8964577a0250034d4f764dcde3a5675881e4aa85f73f6f9ff829982955b5a2e7ba467d5912d685f8c721f860d0c0fb61ac2c72385f3b6bcb4f439ffcaea13ebb4b4e4caadadba92b0ed4ec53b2ee181f19498a603db213c0ad4f0229c6ad1259b49773acfe189cb8c1c203224