www.wellsfargoassetmanagement.com

- Wells Fargo & Company -

Issued by Wells Fargo Certificate Authority WS1

About this certificate

This digital certificate with serial number 05:0a:2e:ff:c1:35:42:6e:33:7d:f7:74:6b:81:42:3f was issued on by Wells Fargo.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: TMS-ADCS
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo

Organization: Wells Fargo
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:0a:2e:ff:c1:35:42:6e:33:7d:f7:74:6b:81:42:3f
Serial Number (int): 6699016201328130428049213054152426047
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 59:03:2a:2f:08:a3:96:da:fb:a6:ce:a0:16:21:fc:d9:90:38:ff:07
AuthorityKeyId: fe:08:e3:63:85:07:7e:f5:00:58:89:b3:89:a9:4f:ed:0f:0a:41:4f

Fingerprint (sha1): f7:8b:3c:f3:55:46:8c:42:8c:2e:b6:7b:44:51:9f:67:14:44:d8:a9
Fingerprint (sha256): 55:b6:e7:02:41:17:46:33:ca:22:de:0d:e1:5e:81:4e:0f:15:58:2e:b5:24:73:64:da:ba:67:c4:cb:08:6c:86

Issuing Certificate URL: http://mssl-aia.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.cer

Revocation information

OCSP Server: http://mssl-ocsp.ws.symantec.com
CRL Distribution Point: http://mssl-crl.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.crl

Check the revocation status for certificate www.wellsfargoassetmanagement.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wellsfargoassetmanagement.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.wellsfargoassetmanagement.com
lb968mnsvdc-www-wellsfargoassetmanagement.wellsfargo.com
lb982aztmpe-www-wellsfargoassetmanagement.wellsfargo.com

Other certificates including the domain name wellsfargoassetmanagement.com

(limited to 100 certificates)
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
maint.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
maint.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
maint.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com

Certificate

The complete raw certificate details for www.wellsfargoassetmanagement.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE0xOuOwZ0EFfRFhCkwJ
jZeLBJFe/WnCR+IXXEnAeEqlC75UApuCpRszkX8meyFXCcBy8gnBkYDg4sH4Dwmx
RhwcE3S5zjcaKyExyY6PU60O9LdhZdq+4aAdSl4SHSF8lVbvChajYulIFfYl4yMp
ZS75MZIeoXMkufu0Ph2jA0MBjxCLAWnGiK9Z+4AG+x/2HJEJs6N+onAnkKnzDIiO
l4Nf8G3/GmF7iPJZMbb0bAf/Qb6aPC9WFCR0l2cXZcT5ZlCoysyFlihSRU/yV/rc
xmyWhQMEkJWYWRGruf5ul1cQRF9OcQSfGSNcETw0611KQfoGNX8KcHUm37R6GEKm
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6699016201328130428049213054152426047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Certificate Authority WS1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TMS-ADCS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.wellsfargoassetmanagement.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20741146958645724847811543722744710660987149978642075239121773371885441598944566040809355039343046123014961775239643269737832347389848277673317129746996029570009953249312462241997473955164739198046130345429116837792686898729443967646098282264665719314881012430112146706699846110368324432475918131336218351556033329122856133097825477584367384495612230824025196534539377556728729631818070887636689261671013776935576936024623470768304047994393783438468896004446819326057859719488488617862666031250229471441163861462217435231530701861445175826055893742315382125754290254065949284869690432153712522509489202507449974826629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (154 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfargoassetmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb968mnsvdc-www-wellsfargoassetmanagement.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb982aztmpe-www-wellsfargoassetmanagement.wellsfargo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59032a2f08a396dafba6cea01621fcd99038ff07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe08e36385077ef5005889b389a94fed0f0a414f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-crl.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-ocsp.ws.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-aia.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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