direct.ctslink.com

- Wells Fargo and Company -

Issued by WellsSecure Certificate Authority

About this certificate

This digital certificate with serial number 4d:3b:89:02:00:00:00:00:3d:c7 was issued on by Wells Fargo.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyEncipherment] (00001111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo and Company

Organization: Wells Fargo and Company
Organization unit: Secured Environment
State / Province: Arizona
Locality: Tempe
Country: US

Wells Fargo

Organization: Wells Fargo
Organization unit: WellsSecure Certification Authorities
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:3b:89:02:00:00:00:00:3d:c7
Serial Number (int): 364720449534644694564295
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: 34:4e:b1:13:35:f6:1c:9b:6d:05:30:c0:99:9e:ef:e1:55:37:70:bf
AuthorityKeyId: d2:98:0a:00:c4:2f:f0:e7:13:79:96:e8:c5:b5:75:3b:f3:2f:dc:43

Fingerprint (sha1): d5:a3:84:40:96:9b:6b:67:20:78:b7:ed:74:ed:e2:4d:31:47:46:12
Fingerprint (sha256): 25:05:52:4b:10:e1:6a:a6:48:da:85:f2:9f:af:6f:b6:15:1e:cc:1e:1d:bc:c6:a2:07:dd:0a:27:6e:31:9d:8d

Issuing Certificate URL: http://crl.pki.wellsfargo.com/wf_wsca_00.crt

Revocation information

OCSP Server: http://validator.wellsfargo.com/
CRL Distribution Point: http://crl.pki.wellsfargo.com/wsca00.crl

Check the revocation status for certificate direct.ctslink.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for direct.ctslink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

direct.ctslink.com
lb901mnsvdc-direct.wellsfargo.com
lb902aztmpe-direct.wellsfargo.com
direct.wellsfargo.com

Other certificates including the domain name ctslink.com

(limited to 100 certificates)
wwwfix.ctslink.com
fix.accesswca.com
www.accesswca.com
fs.accesswca.com
wellspauat.wellsfargo.com
wellspafix.wellsfargo.com
fix.accesswca.com
wellspauat.wellsfargo.com
directfix.ctslink.com
fix.accesswca.com
fsuat.accesswca.com
fs.accesswca.com
wellspafix.wellsfargo.com
direct.ctslink.com
fsfix.accesswca.com
www.accesswca.com
www.ctslink.com
realstp-u.wellsfargo.com
www.ctslink.com
www.accesswca.com
www.ctslink.com
directfix.ctslink.com
direct.ctslink.com
direct.ctslink.com
direct.ctslink.com
www.accesswca.com
fs.accesswca.com
direct.ctslink.com
fs.accesswca.com
www.ctslink.com
wellspauat.wellsfargo.com
uat.accesswca.com
www.ctslink.com
fix.accesswca.com
www.ctslink.com
www.accesswca.com
direct.ctslink.com
www.accesswca.com
fs.accesswca.com
uat.accesswca.com
fs.accesswca.com
wwwfix.ctslink.com
www.ctslink.com
fs.accesswca.com
www.accesswca.com
fsfix.accesswca.com
fs.accesswca.com
fsfix.accesswca.com
www.ctslink.com
www.ctslink.com
www.ctslink.com
fsuat.accesswca.com
fsfix.accesswca.com
wellspafix.wellsfargo.com
directfix.ctslink.com
fix.accesswca.com
direct.ctslink.com
realstp-u.wellsfargo.com
wwwfix.ctslink.com
direct.ctslink.com
www.ctslink.com
www.ctslink.com
www.accesswca.com
wellspa.wellsfargo.com
fs.accesswca.com
ctslink.computershare.com
fix.accesswca.com
www.accesswca.com
fsfix.accesswca.com
direct.ctslink.com
www.ctslink.com
www.ctslink.com
fsfix.accesswca.com
directfix.ctslink.com
fsfix.accesswca.com
fix.accesswca.com
directfix.ctslink.com
fs.accesswca.com
directfix.ctslink.com
wellspafix.wellsfargo.com
fsuat.accesswca.com
fix.accesswca.com
fs.accesswca.com
ctslinkuat.computershare.com
directfix.ctslink.com
fix.accesswca.com
wellspa.wellsfargo.com
fsuat.accesswca.com
fsuat.accesswca.com
fix.accesswca.com
uat.accesswca.com
wellspa.wellsfargo.com
www.ctslink.com
direct.ctslink.com
fix.accesswca.com
uat.accesswca.com
wwwfix.ctslink.com
directfix.ctslink.com
ctslinkuat.computershare.com
www.accesswca.com

Certificate

The complete raw certificate details for direct.ctslink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj4p+FuWTy9jNIChDg/V
hfr+ZgHguhqq0bKGwWDLGuoPIVP0nQGuA5d/no/St+dlaSpCXxWxyQhojsZirzNg
+WjSG+vGtWHgN8FEV8lt73E9rBIc1PH9GFsRNKROQKsVmKAJ+VXzzz7UynPtO8NK
smRA0XRdoCNOZG74R/ceUUbsrzhC22L+bi+mJxTL83rraUVvM97NHeloUO8bwNCU
SA9td8aHV1IlcVC+npo52D7RIEL+mLN8T2Xg2Y+3qiCxrZUEnWfAH2yBV02SDVhb
fgpxzv8Gt37FAez9qO4n+gIgLieVsZfqJT0bj+Fa4qqOBoTMGYl9xCSMsZ4FFKhY
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364720449534644694564295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'WellsSecure Certification Authorities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'WellsSecure Certificate Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-06 00:52:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-06 00:52:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tempe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo and Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secured Environment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'direct.ctslink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25025838567494420231745791941846846773247574664754643339487972731136632647875815973011619089998920044616171119607616765331194387040946321101578034792843519670702893404432744503645757826519935971783250364271994318293104936253187448651715286549425046051262005245071275275930513153270950181854840225743042462676358733697077994214964856971900578000926869231325074962057158405251052598767473177517093417979152271855343615965172283169337137691340486122278553733833431872926419246291172785039675335153655219898354486472612372639230448166013251805378123722974920586619065717791016876168411417152369130736075256341226794276913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							344eb11335f61c9b6d0530c0999eefe1553770bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d2980a00c42ff0e7137996e8c5b5753bf32fdc43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.wellsfargo.com/wsca00.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.wellsfargo.com/wf_wsca_00.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validator.wellsfargo.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct.ctslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb901mnsvdc-direct.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb902aztmpe-direct.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct.wellsfargo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114171.500.0.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wellsfargo.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114171.500.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wellsfargo.com/repository'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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