wellsoneexpensemanager.wf.com
- Wells Fargo & Company -
Issued by Wells Fargo Public Trust Certification Authority 01 G2
About this certificate
This digital certificate with serial number 01:3e:69:a4:4a:a9:94:b9:c2:23:f5:da:cc:3f:3a:b1 was issued on by Wells Fargo & Company.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Wells Fargo & Company
Organization:
Wells Fargo & Company
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
Wells Fargo & Company
Organization:
Wells Fargo & Company
Organization unit: Organization Validated TLS
Organization unit: Organization Validated TLS
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:3e:69:a4:4a:a9:94:b9:c2:23:f5:da:cc:3f:3a:b1Serial Number (int): 1653293070548012477789398582823959217
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: c6:98:cf:87:68:cc:00:97:c7:1e:28:c7:9a:1e:4a:f8:9f:27:27:63
AuthorityKeyId: 39:13:9e:e1:41:d2:3a:45:0b:38:80:60:af:b5:21:41:7c:01:89:7d
Fingerprint (sha1): 50:b9:22:7c:4f:92:07:a3:b0:71:73:3d:3d:ff:12:4f:25:97:b9:1c
Fingerprint (sha256): 05:66:4a:9e:68:cc:73:56:7e:0c:f4:81:d4:df:6e:3b:d6:ab:1d:2c:c5:bc:12:36:ee:0e:63:1d:08:15:11:98
Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt
Revocation information
OCSP Server: http://statush.digitalcertvalidation.comCRL Distribution Point: http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl
Check the revocation status for certificate wellsoneexpensemanager.wf.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wellsoneexpensemanager.wf.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wellsoneexpensemanager.wf.com
Other certificates including the domain name wf.com
(limited to 100 certificates)
ceomediauat.wellsfargo.com
view.mail1.wf.com
wellscontentfix.wellsfargo.com
mortgageprocess.wf.com
www.wealthmanagementinsights.wf.com
global.wf.com
remediation.wf.com
www.welcome.wf.com
hmc-ecard.wf.com
proxy-ewpcs.wellsfargo.com
wimcapabilities.wf.com
emea.wf.com
newsroom.wf.com
ceo-wellscontent.wellsfargo.com
identity.demo.wellsoneexpensemanager.wf.com
edam-test.wf.com
wellscontentfix.wellsfargo.com
wellscontent.wellsfargo.com
ORE.WF.COM
akamai-san15.exacttarget.com
tls.automattic.com
retirementresearch.wf.com
hmc-ecard.wf.com
ceomobileuata.wellsfargo.com
accelerator.wf.com
wimcapabilities.wf.com
treasuryinsights.wf.com
www.wf.com
apac.wf.com
now-test.wf.com
ceomobileuat.wellsfargo.com
wimcapabilities.wf.com
ceomobilesit2.wf.com
storiesdev.wf.com
san-5-s7.tlsprovisioning.exacttarget.com
wellscontent.wellsfargo.com
wellsoneexpensemanager.wf.com
digital.wf.com
hmc-ecard.wf.com
feedback.wf.com
welcome.wf.com
now-rehearsal.wf.com
api.wellsoneexpensemanager.wf.com
hmc-ecard.wf.com
tls.automattic.com
ceo-wellscontent.wellsfargo.com
portfoliopremier.wf.com
wimcapabilities.wf.com
experience.wf.com
wfod.wf.com
retirementresearch.wf.com
claimspayments.wf.com
smallbusinessresources.wf.com
gbxreport-uat.wf.com
storiesnewsletter.wf.com
storiesemail.wf.com
cloud.mail18.wf.com
hmc-ecard.wf.com
homecentral.wf.com
bonusoffer.wf.com
qa.onestop.wf.com
ceomobileuata.wf.com
autodealer.wf.com
hmc-ecard.wf.com
view.mail1.wf.com
stories.wf.com
digital.wf.com
advisors.wf.com
marketing.wf.com
moneystrategies.wf.com
now-breakfix.wf.com
hmc-ecard.wf.com
storiesdev.wf.com
hmc-ecard.wf.com
hmc-ecard.wf.com
hmc-ecard.wf.com
tls.automattic.com
merchantvideos.wf.com
now-breakfix.wf.com
hmc-ecard.wf.com
wf.com
edam.wf.com
proxy-ewpcs.wellsfargo.com
static.wf.com
ceomobilefix.wf.com
api-insights.wellsoneexpensemanager.wf.com
hmc-ecard.wf.com
ceomedia.wf.com
integratedreceivables.wf.com
ilwkeval.wf.com
ceomediafix.wf.com
stories.wf.com
stories-staging.wf.com
entertainment.wf.com
wimcapabilities.wf.com
hmc-ecard.wf.com
ceomobilesit.wellsfargo.com
cloudpages.wf.com
wimcapabilities.wf.com
san-5-s7.tlsprovisioning.exacttarget.com
view.mail1.wf.com
wellscontentfix.wellsfargo.com
mortgageprocess.wf.com
www.wealthmanagementinsights.wf.com
global.wf.com
remediation.wf.com
www.welcome.wf.com
hmc-ecard.wf.com
proxy-ewpcs.wellsfargo.com
wimcapabilities.wf.com
emea.wf.com
newsroom.wf.com
ceo-wellscontent.wellsfargo.com
identity.demo.wellsoneexpensemanager.wf.com
edam-test.wf.com
wellscontentfix.wellsfargo.com
wellscontent.wellsfargo.com
ORE.WF.COM
akamai-san15.exacttarget.com
tls.automattic.com
retirementresearch.wf.com
hmc-ecard.wf.com
ceomobileuata.wellsfargo.com
accelerator.wf.com
wimcapabilities.wf.com
treasuryinsights.wf.com
www.wf.com
apac.wf.com
now-test.wf.com
ceomobileuat.wellsfargo.com
wimcapabilities.wf.com
ceomobilesit2.wf.com
storiesdev.wf.com
san-5-s7.tlsprovisioning.exacttarget.com
wellscontent.wellsfargo.com
wellsoneexpensemanager.wf.com
digital.wf.com
hmc-ecard.wf.com
feedback.wf.com
welcome.wf.com
now-rehearsal.wf.com
api.wellsoneexpensemanager.wf.com
hmc-ecard.wf.com
tls.automattic.com
ceo-wellscontent.wellsfargo.com
portfoliopremier.wf.com
wimcapabilities.wf.com
experience.wf.com
wfod.wf.com
retirementresearch.wf.com
claimspayments.wf.com
smallbusinessresources.wf.com
gbxreport-uat.wf.com
storiesnewsletter.wf.com
storiesemail.wf.com
cloud.mail18.wf.com
hmc-ecard.wf.com
homecentral.wf.com
bonusoffer.wf.com
qa.onestop.wf.com
ceomobileuata.wf.com
autodealer.wf.com
hmc-ecard.wf.com
view.mail1.wf.com
stories.wf.com
digital.wf.com
advisors.wf.com
marketing.wf.com
moneystrategies.wf.com
now-breakfix.wf.com
hmc-ecard.wf.com
storiesdev.wf.com
hmc-ecard.wf.com
hmc-ecard.wf.com
hmc-ecard.wf.com
tls.automattic.com
merchantvideos.wf.com
now-breakfix.wf.com
hmc-ecard.wf.com
wf.com
edam.wf.com
proxy-ewpcs.wellsfargo.com
static.wf.com
ceomobilefix.wf.com
api-insights.wellsoneexpensemanager.wf.com
hmc-ecard.wf.com
ceomedia.wf.com
integratedreceivables.wf.com
ilwkeval.wf.com
ceomediafix.wf.com
stories.wf.com
stories-staging.wf.com
entertainment.wf.com
wimcapabilities.wf.com
hmc-ecard.wf.com
ceomobilesit.wellsfargo.com
cloudpages.wf.com
wimcapabilities.wf.com
san-5-s7.tlsprovisioning.exacttarget.com
Certificate
The complete raw certificate details for wellsoneexpensemanager.wf.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIQAT5ppEqplLnCI/XazD86sTANBgkqhkiG9w0BAQsFADCB kzELMAkGA1UEBhMCVVMxHjAcBgNVBAoMFVdlbGxzIEZhcmdvICYgQ29tcGFueTEj MCEGA1UECxMaT3JnYW5pemF0aW9uIFZhbGlkYXRlZCBUTFMxPzA9BgNVBAMTNldl bGxzIEZhcmdvIFB1YmxpYyBUcnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAw MSBHMjAeFw0yNDAyMTYwMDAwMDBaFw0yNTAzMTEyMzU5NTlaMIGCMQswCQYDVQQG EwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNj bzEeMBwGA1UECgwVV2VsbHMgRmFyZ28gJiBDb21wYW55MSYwJAYDVQQDEx13ZWxs c29uZWV4cGVuc2VtYW5hZ2VyLndmLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANKW1z63aSTpeVvGoOFEzZQ/5CZ39l58m5h1AY+8UrfTY3mbf5ul km4JzyphI+7azkYDNqOj5TdN7P7C6RtkdzXFs5BbjrxaaCxjPSLGXzdNovwVcGkr SGBaFuQbZ8g95rZkaUC2d18ZNfYgQGlz32ria6vgibFP8w96nMp5BskQPQHPsa7l Sk7OLFH7m1zfBUsjfW082RQliC029q47L7lKswQ+qeLv/sfoXib0RbR9apFE0Tlx YrmspOptFSEOqobLOCukeYNxKvVRYze9zf4m0in1NhrgRrGAGCd8Qlq9Sn0+0dKH s2WGyDn5LFNCCxKxKl8x9wHrPb/B0c7Q4jUCAwEAAaOCAh8wggIbMB8GA1UdIwQY MBaAFDkTnuFB0jpFCziAYK+1IUF8AYl9MB0GA1UdDgQWBBTGmM+HaMwAl8ceKMea Hkr4nycnYzAoBgNVHREEITAfgh13ZWxsc29uZWV4cGVuc2VtYW5hZ2VyLndmLmNv bTA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3 LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjBqBgNVHR8EYzBhMF+gXaBbhllodHRwOi8vY2RwaC5k aWdpdGFsY2VydHZhbGlkYXRpb24uY29tL1dlbGxzRmFyZ29QdWJsaWNUcnVzdENl cnRpZmljYXRpb25BdXRob3JpdHkwMUcyLmNybDCBsAYIKwYBBQUHAQEEgaMwgaAw NAYIKwYBBQUHMAGGKGh0dHA6Ly9zdGF0dXNoLmRpZ2l0YWxjZXJ0dmFsaWRhdGlv bi5jb20waAYIKwYBBQUHMAKGXGh0dHA6Ly9jYWNlcnRzLmRpZ2l0YWxjZXJ0dmFs aWRhdGlvbi5jb20vV2VsbHNGYXJnb1B1YmxpY1RydXN0Q2VydGlmaWNhdGlvbkF1 dGhvcml0eTAxRzIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBAKrcE09wAmpGIG7C9tfWZOzSsf1TpIbTwwTn WiY5nTbfm6aXX57Pez6JQYNYL+/pH5daZGnkZFBhqXaZBMy0H+uC5l9qtdSh3aPr qBcLcHE06Wmoegsoz2Nnsi2DKU1vJB1beet5AUFOlp309NRAAnIzjJSLhE5qjlc2 ReEaYU3s+Rc1dVU3GdYvMTenXpPrZUtByPjmsQqScIgELCX2MnGTX+8L43FY92qX NZ556kzZ03OjctWY+kdfUoK1rXyKKIVVgsb4FRACHZHP8fQiP6UwdrYT6cnSsdR1 VGM0m1mJj6K7pEJdkxqzuuSmEeE1uGBpfGd3JyKmcpu1PBNZ/Sk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pbXPrdpJOl5W8ag4UTN lD/kJnf2XnybmHUBj7xSt9NjeZt/m6WSbgnPKmEj7trORgM2o6PlN03s/sLpG2R3 NcWzkFuOvFpoLGM9IsZfN02i/BVwaStIYFoW5BtnyD3mtmRpQLZ3Xxk19iBAaXPf auJrq+CJsU/zD3qcynkGyRA9Ac+xruVKTs4sUfubXN8FSyN9bTzZFCWILTb2rjsv uUqzBD6p4u/+x+heJvRFtH1qkUTROXFiuayk6m0VIQ6qhss4K6R5g3Eq9VFjN73N /ibSKfU2GuBGsYAYJ3xCWr1KfT7R0oezZYbIOfksU0ILErEqXzH3Aes9v8HRztDi NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1653293070548012477789398582823959217 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Organization Validated TLS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Public Trust Certification Authority 01 G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wellsoneexpensemanager.wf.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26584426413979756577016250528933673394390996943677968013194394219043240835494889586527865476131684942462609517090847068077510187624013864434756057785152306973957259872845996005512949002088794232611080362488844288585656348499898143401094018374648586069356349118976893741439824444216070633431780579701942235087137523767422200409163561941288688106478829659424548397032273901936538400072280364682261088043956407030186342583534561270851613854811791959664594923035293341391259453349216352053380379163792030345610517630826125348302735067744152973437374048341781703571885902999448115997639793166564160784969210488101566210613 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 39139ee141d23a450b388060afb521417c01897d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c698cf8768cc0097c71e28c79a1e4af89f272763 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsoneexpensemanager.wf.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statush.digitalcertvalidation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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