wellscontentuat.wellsfargo.com

- Wells Fargo & Company -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:c7:a5 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Company registration number: mmDhWq3pfcaQfsf8zcTDwiJNuFSDhW1p
Organization: Wells Fargo & Company
State / Province: California
Locality: San Francisco
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:c7:a5
Serial Number (int): 182181
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 1a:ac:a0:c7:b6:0e:cd:ac:94:5c:91:3b:fc:70:ab:e8:4d:03:27:6b
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): af:59:61:0f:0e:c3:81:46:c8:18:01:27:3b:43:26:58:eb:81:33:db
Fingerprint (sha256): 00:b5:6f:47:a2:4a:aa:27:4c:4a:4d:1b:3a:ed:ee:a6:ed:ad:f8:df:a1:b9:57:96:af:81:d8:a3:79:b0:35:e2

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate wellscontentuat.wellsfargo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wellscontentuat.wellsfargo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wellscontentuat.wellsfargo.com

Other certificates including the domain name wellsfargo.com

(limited to 100 certificates)
teamworks-uat.wellsfargo.com
st-adhoc.wellsfargo.com
ceosvfix.wellsfargo.com
ceomediauat.wellsfargo.com
achgpuat1.wellsfargo.com
mposapi-uat.wellsfargo.com
retirement-bpo-s-prod.wellsfargo.com
bwl.wellsfargo.com
acctagg.wellsfargo.com
proxy-ewpcs.wellsfargo.com
www.retirementcity.wellsfargo.com
ectz5863r9.wellsfargo.com
mwapp-sit2.wellsfargo.com
edisclosure-pm.wellsfargo.com
qa-static.evetest.wellsfargo.com
ectv4022r5.wellsfargo.com
imagenet-mortgage-uat.wellsfargo.com
st-adhoc.wellsfargo.com
uat-wib.isgpp.wellsfargo.com
ebtest-1bw-fccssqsa.wellsfargo.com
wellsorders.ceo.wellsfargo.com
wellsfs.wellsfargo.com
esignature.wellsfargo.com
equitylinkedreporting.wellsfargo.com
wellsreport.wellsfargo.com
ectx4004r8v.wellsfargo.com
tradeworks-wca.wellsfargo.com
backoffice.wellsfargo.com
eservices.wellsfargodealerservices.com
mxdalpv05.wellsfargo.com
mdm-qa.msgqa.wellsfargo.com
myedpulse.wellsfargo.com
wwwfix.ctslink.com
marketdata.wellsfargo.com
wellscontentfix.wellsfargo.com
onlinedecisiontool.wellsfargo.com
sit-www.evetest.wellsfargo.com
wellscontentuat.wellsfargo.com
pasline-uat.wellsfargo.com
wfadvisors-prod1.wellsfargo.com
marketdata.wellsfargo.com
labs.wellsfargo.com
wellsceopafix.ceo.wellsfargo.com
www.wellsfargoassetmanagement.com
procuretopay.wellsfargo.com
oxi-m-cte-broker.wellsfargo.com
401knext-uat.wellsfargo.com
deposit.wellsfargo.com
servicesuat.ceo.wellsfargo.com
bcereporting-sit.wellsfargo.com
ofxtax.wellsfargo.com
teamworks2-uat.wellsfargo.com
wellswcapa.sec.wellsfargo.com
www-wellsfargoadvisors.wellsfargo.com
cashops-uat.wellsfargo.com
cms.wellsfargo.com
ifs-cra.wellsfargo.com
cm-pfix.ceo.wellsfargo.com
ectv5858r8v.wellsfargo.com
creditweb-ist.wellsfargo.com
safe-t.wellsfargo.com
www.wellsfargo.com
pyd-WS2-client.wellsfargo.com
RAS-AZ-A.wellsfargo.com
3PV-TL3P003L.WELLSFARGO.COM
wfa-d-1trdfix-msg-v-01.wellsfargo.com
P2P-CLX.test.wellsfargo.com
retirement-bpo-uat.wellsfargo.com
ebprod-1bw-retail.wellsfargo.com
wmidsa.wellsfargo.com
pyd-WQE-client.wellsfargo.com
wfa-t-1trdapi-websvc-v-00.wellsfargo.com
hulavc-n-sit.wellsfargo.com
csfedportal-ext.wellsfargo.com
csfactor-uat.wellsfargo.com
m-wfadvisorbroker-cte1.wellsfargo.com
stg-admin.wellsfargo.com
wellstrustfix.wellsfargo.com
retirementservices-uat.wellsfargo.com
studentinsurance-uat.wellsfargo.com
ebprod-1wfw-wfapublic.wellsfargo.com
whlsleretirement-uat.wellsfargo.com
voltage-ps-0000.msgdev.wellsfargo.com
accountservices-wellsonecard.wellsfargo.com
godigitaldesktop.wellsfargo.com
ectv4008r8v.wellsfargo.com
coms-ceo-uat.wellsfargo.com
api-enterprise1.wellsfargo.com
ect-lab-6912r5a.wellsfargo.com
m.wellsfargo.com
teamworks-uat.wellsfargo.com
nc2-qaapm-pfe-wtwt.wellsfargo.com
gpow.wellsfargo.com
corporateretirementportal.wellsfargo.com
fundservicesreporting.wellsfargo.com
sourcing.wellsfargo.com
ifs-cra-bcp.wellsfargo.com
ectx4020r8v.wellsfargo.com
eddwtuat.ceo.wellsfargo.com
scf-apps.wellsfargo.com

Certificate

The complete raw certificate details for wellscontentuat.wellsfargo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttYYnJC22/s84Vdz9Edl
OulkdNVWSEgFtS8Z9vxrlFI2Ci0R6P/Vh0u7xP7DfwHvz7puOcdULx/hI2WUtwHi
RMnJ2xobuyAVE/q59U8DskbYna7wkl0qYR4A8bK920SAcSqhoAkrbdZ6/n45o/4p
eiGDp5W1PXf53jXgiRuK5YnPHZWec6BSu1Y7JYIv0ch+LHIjd2+gwIoGSmLC4DkQ
VpcZrbJTsPzqrLd7//kppI3b30RkWi+b4rx21b0adrXYFrpzVoGMp0GoRyXvAq3e
M3SyEeuBffnXSfYcQdrW+reTsVfh//eJ2RkO4EF/irR8TciLEBQg2wcqh6eFP/fw
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 182181
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-18 13:49:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-21 13:15:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mmDhWq3pfcaQfsf8zcTDwiJNuFSDhW1p'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wellscontentuat.wellsfargo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23080946244786442176189236726126680710696645267859092531874763738535767066413539040712966582035173964203997384600871184252024400188902982994540803440301717030905798993305529283444087598609027525642088001672143538329962754176012044723340934247894964670967020074038668577427751151685417540931554276709006638398628388633638224058609802835800339835415662462444609011127542121206477964144332955872262936951095331707303304954198675889238956069345461866960114686294021257165720316257322846941935879871107094842000656159337058469208180658790652576633106412538251628494564809318853875373090459829800164654006966126166507253959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellscontentuat.wellsfargo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1aaca0c7b60ecdac945c913bfc70abe84d03276b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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