welcome.wf.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 03:92:5b:3c:6a:ef:e7:7f:23:b7:e3:8b:fb:be:14:b4 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=welcome.wf.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:5b:3c:6a:ef:e7:7f:23:b7:e3:8b:fb:be:14:b4
Serial Number (int): 4747609814759953134263998266579227828
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 81:ef:4c:58:fd:0f:e4:61:ab:b3:8e:9e:b5:33:4d:5a:03:1d:74:75
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): ef:0f:28:7a:4e:bf:cc:d5:c3:8d:38:ed:02:12:a5:fc:cb:85:49:1d
Fingerprint (sha256): 05:94:fa:26:52:2a:30:a6:df:70:02:01:98:02:76:8c:21:82:03:78:ca:cd:82:d2:f9:4b:b7:ea:72:b8:20:61

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate welcome.wf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for welcome.wf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

welcome.wf.com

Other certificates including the domain name wf.com

(limited to 100 certificates)
ceomediauat.wellsfargo.com
view.mail1.wf.com
wellscontentfix.wellsfargo.com
mortgageprocess.wf.com
www.wealthmanagementinsights.wf.com
global.wf.com
remediation.wf.com
www.welcome.wf.com
hmc-ecard.wf.com
proxy-ewpcs.wellsfargo.com
wimcapabilities.wf.com
emea.wf.com
newsroom.wf.com
ceo-wellscontent.wellsfargo.com
identity.demo.wellsoneexpensemanager.wf.com
edam-test.wf.com
wellscontentfix.wellsfargo.com
wellscontent.wellsfargo.com
ORE.WF.COM
akamai-san15.exacttarget.com
tls.automattic.com
retirementresearch.wf.com
hmc-ecard.wf.com
ceomobileuata.wellsfargo.com
accelerator.wf.com
wimcapabilities.wf.com
treasuryinsights.wf.com
www.wf.com
apac.wf.com
now-test.wf.com
ceomobileuat.wellsfargo.com
wimcapabilities.wf.com
ceomobilesit2.wf.com
storiesdev.wf.com
san-5-s7.tlsprovisioning.exacttarget.com
wellscontent.wellsfargo.com
wellsoneexpensemanager.wf.com
digital.wf.com
hmc-ecard.wf.com
feedback.wf.com
welcome.wf.com
now-rehearsal.wf.com
api.wellsoneexpensemanager.wf.com
hmc-ecard.wf.com
tls.automattic.com
ceo-wellscontent.wellsfargo.com
portfoliopremier.wf.com
wimcapabilities.wf.com
experience.wf.com
wfod.wf.com
retirementresearch.wf.com
claimspayments.wf.com
smallbusinessresources.wf.com
gbxreport-uat.wf.com
storiesnewsletter.wf.com
storiesemail.wf.com
cloud.mail18.wf.com
hmc-ecard.wf.com
homecentral.wf.com
bonusoffer.wf.com
qa.onestop.wf.com
ceomobileuata.wf.com
autodealer.wf.com
hmc-ecard.wf.com
view.mail1.wf.com
stories.wf.com
digital.wf.com
advisors.wf.com
marketing.wf.com
moneystrategies.wf.com
now-breakfix.wf.com
hmc-ecard.wf.com
storiesdev.wf.com
hmc-ecard.wf.com
hmc-ecard.wf.com
hmc-ecard.wf.com
tls.automattic.com
merchantvideos.wf.com
now-breakfix.wf.com
hmc-ecard.wf.com
wf.com
edam.wf.com
proxy-ewpcs.wellsfargo.com
static.wf.com
ceomobilefix.wf.com
api-insights.wellsoneexpensemanager.wf.com
hmc-ecard.wf.com
ceomedia.wf.com
integratedreceivables.wf.com
ilwkeval.wf.com
ceomediafix.wf.com
stories.wf.com
stories-staging.wf.com
entertainment.wf.com
wimcapabilities.wf.com
hmc-ecard.wf.com
ceomobilesit.wellsfargo.com
cloudpages.wf.com
wimcapabilities.wf.com
san-5-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for welcome.wf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1waH/naxfPIiWix/SSjO
FvpRzBSgtF0vIJuQmscQkaLgxsmQ6mu0mms2fq5KYh8kv4zELsiCiV8D2H6xlyF6
MTueAS4ovNj60KdiCOsahggy2lUsRhrzAebltY3KiML0t+Q/oZ+QGcuac/pBWAON
6n4fA/RANS2VzH3E+bywOfQ0RTFMJimkfmOAMxIkelkUgeCJ9OgUk5aTSe22D4F0
7PjemG5KA/7m4vGHPhOfkm/XJ4x/Dqhsf+5auQZH2A23qoEaWZKe0iE6p7uwKhqT
U+Ex59FIS/FnFnKGhMNCVBfmuHc/2LJKV6IkooMpJDOi9JIcJzK+m+ZTH9euPjwf
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4747609814759953134263998266579227828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'welcome.wf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27144456235553841802263294170688342371658178076446201393899547820363604083869759324258605489700799624105360215425356997952216675461498535467892060997877500157990979646339262024995753326470184150664625651566150108287369398585001602967401393429603619196092870523233461773644968626298136130096329615714166713502348215437582757319891009324167339848829257203226664309314396803097517924350780823091121605446522781066335783373469744837239748884580230361630402003479368621032032820273586961659490955425289942765149211972550948065266169155084745087641048443781079738349492245257252251156379916616583957504376806365442030182193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81ef4c58fd0fe461abb38e9eb5334d5a031d7475
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.wf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018791fd0a93000004030047304502203272c8faeea2a8593829251b8889491fd8f9ba5348c7532ed06e4b0b4dbf0bb7022100d13f8d91499449f5db9df2b06e3eb30dff28a47fb4b6e324f4bd59ad6c6e6152007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018791fd0b09000004030047304502206da2f4f2e11ea2e3b58e26b15eec599492bf0443a61411495867a26995543d76022100f30689d8d8d32baf3b2d0fe046ba70f64b5e302f8e745bd387005ea5439595380076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018791fd0a8e0000040300473045022100f6ed0962114db12e8dd7b92225ba8c5b291d7b3ba0258270b4044407f0c0d37302201ebe2235186639d27e44b014d770ffb5090d8b2584a1a1c2b1168082097169d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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