zvc-i.vwfsag.com

- Volkswagen Financial Services AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 7c:e1:94:6b:08:7c:b4:42:cb:f3:e5:b4:2e:b5:e5:17:46:9b:59:f7 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Financial Services AG

Organization: Volkswagen Financial Services AG
Organization unit: IH-IBSH
State / Province: Niedersachsen
Locality: Braunschweig
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:e1:94:6b:08:7c:b4:42:cb:f3:e5:b4:2e:b5:e5:17:46:9b:59:f7
Serial Number (int): 712945452291637977171320007941399431165798734327
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 25:c5:5b:d9:e5:09:92:d0:7b:f3:76:48:54:7e:54:2e:45:cd:93:2e
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 18:f6:0f:91:0c:84:b8:a6:a0:ef:d0:01:ae:4c:27:df:0c:f6:9a:18
Fingerprint (sha256): e8:55:dc:24:45:1d:6e:b8:4e:c2:c3:1c:37:da:52:09:3e:83:a5:f3:bd:17:04:b3:41:cb:9b:b8:e9:3a:ab:ba

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate zvc-i.vwfsag.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zvc-i.vwfsag.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zvc-i.vwfsag.com

Other certificates including the domain name vwfsag.com

(limited to 100 certificates)
auth.vwfs.com
auth.vwfs.com
auth.vwfs.com
zvc-k.vwfsag.com
vwfsag.com
www.vwfsag.de
www.vwfsag.de
vwfs.com
vwfsag.com
auth.vwfsag.com
www.vwfsag.com
auth.vwfs.com
www.vwfsag.de
auth.vwfsag.com
www.vwfsag.de
vwfs.com
www.vwfsag.de
auth.vwfs.com
zvc-k.vwfsag.com
www.vwfsag.de
zvc-i.vwfsag.com

Certificate

The complete raw certificate details for zvc-i.vwfsag.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH+haQ8rXvEki7vTyxBi
LthOgL+OgVqNLnzX6lQd2plGgqaWFw3z5d9tsHNf6Elnx1dW2XwXSUPY2NWgPCGo
3xtJr9KyeTThgJeGLyFMtzzIspEL8bYTSHCT1cPhUznQS5m2U6E+hJWd3PlwosR0
NUDIbtLzOWMYw0scrLa3wMYh9r+3QtrALI0Ev6q6YiExqBtUMN+6OvIQB7EzwCgw
zw6/27vA6/S8YQmVGwhuAlbhxaRkZzHJc/ICzQVRkc0/o7bqnqn636NPTLNkAy2C
g81t10BfCuBm2qVyepmFVqROefTmV4hbwnOUC4eeO23DfKYQn+B/2w2TCQVykZlI
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 712945452291637977171320007941399431165798734327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 12:32:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-13 12:42:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Braunschweig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Volkswagen Financial Services AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IH-IBSH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'zvc-i.vwfsag.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21775925404003480108042993784229204062953928155054945285022126265713778045401025452847637443975856233046068122366388795988374580665171296877107535826158757627402540696894971739775653916025344626531827162179742331524564796326952849214824993456026886404681671694821971569757564801642015112463398255462383300735012426091684059768701126504186093163534546898976642572717671794855827173911561523654487401526370732807415578541030335121584460672588647575526428312679033790569716763093543693315183052757433074984259060719352971973053133123211868210130088820241439582820723804486988603593286151210730219924887591465122868578493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zvc-i.vwfsag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25c55bd9e50992d07bf37648547e542e45cd932e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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