direct.ctslink.com

- Wells Fargo & Company -

Issued by Wells Fargo Public Trust Certification Authority 01 G2

About this certificate

This digital certificate with serial number 06:f1:64:75:55:ba:89:a0:3e:2d:4b:87:81:96:18:da was issued on by Wells Fargo & Company.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Organization: Wells Fargo & Company
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: Organization Validated TLS
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:f1:64:75:55:ba:89:a0:3e:2d:4b:87:81:96:18:da
Serial Number (int): 9228749054803503989298762199489452250
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3a:bc:43:8e:c6:b3:27:35:33:51:08:ea:fe:1d:d0:f8:21:36:97:53
AuthorityKeyId: 39:13:9e:e1:41:d2:3a:45:0b:38:80:60:af:b5:21:41:7c:01:89:7d

Fingerprint (sha1): b4:04:fc:5c:0c:69:35:68:32:2f:45:2f:8e:b4:06:a8:c8:45:07:6c
Fingerprint (sha256): 4e:7a:5d:51:d5:23:d7:d4:8f:69:ab:40:0f:13:ea:fd:e8:f3:8c:24:0a:69:af:1d:45:cc:1d:d0:cc:1a:67:f9

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt

Revocation information

OCSP Server: http://statush.digitalcertvalidation.com
CRL Distribution Point: http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl

Check the revocation status for certificate direct.ctslink.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for direct.ctslink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

direct.ctslink.com
direct.wellsfargo.com
direct-svdc.wellsfargo.com
direct-tmpe.wellsfargo.com

Other certificates including the domain name ctslink.com

(limited to 100 certificates)
wwwfix.ctslink.com
fix.accesswca.com
www.accesswca.com
fs.accesswca.com
wellspauat.wellsfargo.com
wellspafix.wellsfargo.com
fix.accesswca.com
wellspauat.wellsfargo.com
directfix.ctslink.com
fix.accesswca.com
fsuat.accesswca.com
fs.accesswca.com
wellspafix.wellsfargo.com
direct.ctslink.com
fsfix.accesswca.com
www.accesswca.com
www.ctslink.com
realstp-u.wellsfargo.com
www.ctslink.com
www.accesswca.com
www.ctslink.com
directfix.ctslink.com
direct.ctslink.com
direct.ctslink.com
direct.ctslink.com
www.accesswca.com
fs.accesswca.com
direct.ctslink.com
fs.accesswca.com
www.ctslink.com
wellspauat.wellsfargo.com
uat.accesswca.com
www.ctslink.com
fix.accesswca.com
www.ctslink.com
www.accesswca.com
direct.ctslink.com
www.accesswca.com
fs.accesswca.com
uat.accesswca.com
fs.accesswca.com
wwwfix.ctslink.com
www.ctslink.com
fs.accesswca.com
www.accesswca.com
fsfix.accesswca.com
fs.accesswca.com
fsfix.accesswca.com
www.ctslink.com
www.ctslink.com
www.ctslink.com
fsuat.accesswca.com
fsfix.accesswca.com
wellspafix.wellsfargo.com
directfix.ctslink.com
fix.accesswca.com
direct.ctslink.com
realstp-u.wellsfargo.com
wwwfix.ctslink.com
direct.ctslink.com
www.ctslink.com
www.ctslink.com
www.accesswca.com
wellspa.wellsfargo.com
fs.accesswca.com
ctslink.computershare.com
fix.accesswca.com
www.accesswca.com
fsfix.accesswca.com
direct.ctslink.com
www.ctslink.com
www.ctslink.com
fsfix.accesswca.com
directfix.ctslink.com
fsfix.accesswca.com
fix.accesswca.com
directfix.ctslink.com
fs.accesswca.com
directfix.ctslink.com
wellspafix.wellsfargo.com
fsuat.accesswca.com
fix.accesswca.com
fs.accesswca.com
ctslinkuat.computershare.com
directfix.ctslink.com
fix.accesswca.com
wellspa.wellsfargo.com
fsuat.accesswca.com
fsuat.accesswca.com
fix.accesswca.com
uat.accesswca.com
wellspa.wellsfargo.com
www.ctslink.com
direct.ctslink.com
fix.accesswca.com
uat.accesswca.com
wwwfix.ctslink.com
directfix.ctslink.com
ctslinkuat.computershare.com
www.accesswca.com

Certificate

The complete raw certificate details for direct.ctslink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlci1vKKiHx7bLIakBH2l
1Chz0yfS7+PHKSj1u9yuM9r1xNHG1Z/12HupxOwCZiCjNZefusvUvYoEKQqJGgyv
gHyKIz22P9nb7oOHQ5kIvsqs/ALrAYpRqBWNfZKtCW9vhB9Vb/7TxulhLEkaGh6G
CTrzhceORY+deN9C01wYkKGDnwN4ZPVa+Sfci6fVarf3J7JpAzhQj3h8XkE8VC4j
gmuTy2yPFD7666lOoii8FutYxQbkSz8Qbrv3ZUgjkEX0MBaMYU7u8ovFvWNWdd/x
ZtSb9YsC8qGsNz1fj/VVDjbuOyvYZcXA0HYRevqzeNUbctgl9LVV/BgtyZ/lXaVV
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9228749054803503989298762199489452250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Organization Validated TLS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Public Trust Certification Authority 01 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'direct.ctslink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18908481185166544644714953930190459985759257191850752103473406269298588196233562740775580171015107424491829058311752610134392785844877920038033071124799926807612196458390816942773620964902613940017342918191926605541153392134402462481278131644550262445811402879990242729613806211375631735346527172289979449080356534121890935776441123977726485787486515838082231243104965515316974203317220720130299776271133098075701628271393871899116532097322100897904991918773255326583003971967601522214751670795699409648298437332064813229635159838276451981032614345893313804791639237910601914381572335911733228014905177040068138063233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 39139ee141d23a450b388060afb521417c01897d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3abc438ec6b32735335108eafe1dd0f821369753
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct.ctslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct-svdc.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct-tmpe.wellsfargo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statush.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001b078b5e45aa00138b05f20d365c81187719a94640e55fee4365aedca45351a19848d302deb741a0a4ef17fd5b3b304fbae995a9160cb114f30496c41e90e0034844d8c9138bad3cb789a9cde4db5d41a399e3369bfb870094244f3db10c3f2e19a171097d52fabcfca08709cea666985d45aedf7fc05bc0ec5a490a5f461cb6d1dfc868ef4ce772086b4c90a9aa78e79d2398a544524f94df336f414f6bedbfc665077e904517fcf326641cb25a5e7b8bab6f452fa2aedb0630b993ca6117610c35cc96ed8eaccef75b92ffc7c539ef9b8b5f101e7ed81203748a353ecf4695d12cb6fce5700382a5c28e5ac261b49dd7a8ab870b9ef61aca280918406a240a