www.ctslink.com

- Wells Fargo and Company -

Issued by WellsSecure Certification Authority 01 G2

About this certificate

This digital certificate with serial number 49:e7:d9:a0:00:00:00:00:1a:3c was issued on by Wells Fargo.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo and Company

Organization: Wells Fargo and Company
Organization unit: Secure Environments
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo

Organization: Wells Fargo
Organization unit: WellsSecure Certification Authorities
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 49:e7:d9:a0:00:00:00:00:1a:3c
Serial Number (int): 349009632664413511096892
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: f5:3f:9e:b8:c1:fb:1c:79:35:e7:7c:b3:45:36:7d:31:c8:ea:d2:53
AuthorityKeyId: 59:9a:01:e5:e7:c3:e6:f3:25:78:f1:5a:d9:a8:e9:f1:72:94:8e:30

Fingerprint (sha1): e8:b5:cb:8d:2c:44:a6:c4:d4:d6:e4:50:38:bd:93:3e:8b:ce:86:fb
Fingerprint (sha256): 3d:58:27:1d:f5:8d:6f:9e:e4:af:50:3a:44:59:db:e0:4b:d5:dd:47:4a:0e:b6:c6:d7:82:4c:a6:2e:8d:66:a3

Issuing Certificate URL: http://crl.pki.wellsfargo.com/wf_wsca_01_G2.crt

Revocation information

OCSP Server: http://validator.wellsfargo.com/
CRL Distribution Point: http://crl.pki.wellsfargo.com/wsca01G2.crl

Check the revocation status for certificate www.ctslink.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ctslink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ctslink.com
crm.wellsfargo.com
www.cdolink.com
www.securitieslink.com
ctslink.wellsfargo.com
securitieslink.wellsfargo.com
ctslink-svdc.wellsfargo.com
ctslink-tmpe.wellsfargo.com

Other certificates including the domain name ctslink.com

(limited to 100 certificates)
wwwfix.ctslink.com
fix.accesswca.com
www.accesswca.com
fs.accesswca.com
wellspauat.wellsfargo.com
wellspafix.wellsfargo.com
fix.accesswca.com
wellspauat.wellsfargo.com
directfix.ctslink.com
fix.accesswca.com
fsuat.accesswca.com
fs.accesswca.com
wellspafix.wellsfargo.com
direct.ctslink.com
fsfix.accesswca.com
www.accesswca.com
www.ctslink.com
realstp-u.wellsfargo.com
www.ctslink.com
www.accesswca.com
www.ctslink.com
directfix.ctslink.com
direct.ctslink.com
direct.ctslink.com
direct.ctslink.com
www.accesswca.com
fs.accesswca.com
direct.ctslink.com
fs.accesswca.com
www.ctslink.com
wellspauat.wellsfargo.com
uat.accesswca.com
www.ctslink.com
fix.accesswca.com
www.ctslink.com
www.accesswca.com
direct.ctslink.com
www.accesswca.com
fs.accesswca.com
uat.accesswca.com
fs.accesswca.com
wwwfix.ctslink.com
www.ctslink.com
fs.accesswca.com
www.accesswca.com
fsfix.accesswca.com
fs.accesswca.com
fsfix.accesswca.com
www.ctslink.com
www.ctslink.com
www.ctslink.com
fsuat.accesswca.com
fsfix.accesswca.com
wellspafix.wellsfargo.com
directfix.ctslink.com
fix.accesswca.com
direct.ctslink.com
realstp-u.wellsfargo.com
wwwfix.ctslink.com
direct.ctslink.com
www.ctslink.com
www.ctslink.com
www.accesswca.com
wellspa.wellsfargo.com
fs.accesswca.com
ctslink.computershare.com
fix.accesswca.com
www.accesswca.com
fsfix.accesswca.com
direct.ctslink.com
www.ctslink.com
www.ctslink.com
fsfix.accesswca.com
directfix.ctslink.com
fsfix.accesswca.com
fix.accesswca.com
directfix.ctslink.com
fs.accesswca.com
directfix.ctslink.com
wellspafix.wellsfargo.com
fsuat.accesswca.com
fix.accesswca.com
fs.accesswca.com
ctslinkuat.computershare.com
directfix.ctslink.com
fix.accesswca.com
wellspa.wellsfargo.com
fsuat.accesswca.com
fsuat.accesswca.com
fix.accesswca.com
uat.accesswca.com
wellspa.wellsfargo.com
www.ctslink.com
direct.ctslink.com
fix.accesswca.com
uat.accesswca.com
wwwfix.ctslink.com
directfix.ctslink.com
ctslinkuat.computershare.com
www.accesswca.com

Certificate

The complete raw certificate details for www.ctslink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowwTemhPef2x60jyli7U
hFD41zfX7O7bDmXOLkxygmUIlPtvfzortExF2b7DWszfm9qGPg1FIicilTGuHms7
5xbdtxM/LeWcZZTr8o22nd+1osW/B76S7gswh5hUSPK3zFSLEwFXv6cWfUdN9DNe
Zj9PjfTcsHmmFN6VoICkY4JmK33AsShQX9XGdr13Ix/nXWTk+O4kkXOmRKV6MpVO
01Gt0WtCiAG42LLZX9Cn6WhMXeRzFyWuppQF9CWFIABMuQhFFZcNNhwm3Wrm3X36
tR303h6kgf0/dIWtrYLpLZqdZMkbJtMHvwe2ycNLMDcG5Nv05Hhyk19HKSeIuGQV
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349009632664413511096892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WellsSecure Certification Authorities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WellsSecure Certification Authority 01 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-23 10:51:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-22 10:51:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo and Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Environments'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ctslink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20582798649683919737908303575079853485576616603464846115019729649864677693114730076703322955056381457374448572348427033579169364342942037976674419220534426820242808921120657639890841163420483175739542554057624057761190077615502992234567796153679690090819131575822749315039693001499338707682417427273879860652612880057780761988286941101951505005261430212160653201605701155533603920068380638780575898178750345316246454959354505788771989398555860874950227965404794454341235481112347078437308389212731449065073812576128612115459109063233681949212507249855010225983588233492256656196037475801724596411181877475750369826277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdolink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securitieslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctslink.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitieslink.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctslink-svdc.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctslink-tmpe.wellsfargo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f53f9eb8c1fb1c7935e77cb345367d31c8ead253
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 599a01e5e7c3e6f32578f15ad9a8e9f172948e30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.wellsfargo.com/wsca01G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.wellsfargo.com/wf_wsca_01_G2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validator.wellsfargo.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114171.500.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wellsfargo.com/cp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114171.500.0.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.wellsfargo.com/repository'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00386dbac067e81df11ade572a6e4546b1f5f1d622b590699efa2ce4c9a6758bf3b634b1ec37ae2f595a3a748370b283f96f4d21bc6e5858fa4d7e910e7b1a747ebdc3d0492d6b33646b3a45c0f0ec521231d52146bc73284849f8f8ab3cabc6b67069c3031dcad5f061195274e0e85df78162e3de95932287146436cb278a41b06c5b2d4a52e57da0f458a1a2b5c36314ad3d45a8eb563cd17af2c0ce93c84bfb27f72608d7d1c9a7cf84421795266576f380915b6e20cb46f1f2abdd8edc449f5965ae0046983bd0374b82e034d88c36d2b788fc73bcc9f22c18a7253a8e4e1e4828c3509aa3faa4e03f24a41d1348483b70069fd414865f15bd288031b94051