directfix.ctslink.com

- Wells Fargo & Company -

Issued by Wells Fargo Public Trust Certification Authority 01 G2

About this certificate

This digital certificate with serial number 0e:95:94:8d:f3:b4:c6:12:89:74:e5:d6:2d:84:c1:c0 was issued on by Wells Fargo & Company.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: TMS-ADCS
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: Organization Validated TLS
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:95:94:8d:f3:b4:c6:12:89:74:e5:d6:2d:84:c1:c0
Serial Number (int): 19385857216126165900425968336503095744
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 63:72:50:da:a9:11:97:29:2f:51:b6:a9:b9:7e:af:68:a2:98:7c:c0
AuthorityKeyId: 39:13:9e:e1:41:d2:3a:45:0b:38:80:60:af:b5:21:41:7c:01:89:7d

Fingerprint (sha1): af:81:32:f6:28:2f:23:8c:ef:35:40:ec:a9:82:e5:de:8e:6a:57:81
Fingerprint (sha256): 67:34:05:3f:62:bb:7f:6f:f4:13:18:d4:c0:f3:04:d6:1a:ab:7c:4f:9f:d9:43:d0:54:d4:fd:f0:5b:c0:0d:14

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt

Revocation information

OCSP Server: http://statush.digitalcertvalidation.com
CRL Distribution Point: http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl

Check the revocation status for certificate directfix.ctslink.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for directfix.ctslink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

directfix.ctslink.com

Other certificates including the domain name ctslink.com

(limited to 100 certificates)
wwwfix.ctslink.com
fix.accesswca.com
www.accesswca.com
fs.accesswca.com
wellspauat.wellsfargo.com
wellspafix.wellsfargo.com
fix.accesswca.com
wellspauat.wellsfargo.com
directfix.ctslink.com
fix.accesswca.com
fsuat.accesswca.com
fs.accesswca.com
wellspafix.wellsfargo.com
direct.ctslink.com
fsfix.accesswca.com
www.accesswca.com
www.ctslink.com
realstp-u.wellsfargo.com
www.ctslink.com
www.accesswca.com
www.ctslink.com
directfix.ctslink.com
direct.ctslink.com
direct.ctslink.com
direct.ctslink.com
www.accesswca.com
fs.accesswca.com
direct.ctslink.com
fs.accesswca.com
www.ctslink.com
wellspauat.wellsfargo.com
uat.accesswca.com
www.ctslink.com
fix.accesswca.com
www.ctslink.com
www.accesswca.com
direct.ctslink.com
www.accesswca.com
fs.accesswca.com
uat.accesswca.com
fs.accesswca.com
wwwfix.ctslink.com
www.ctslink.com
fs.accesswca.com
www.accesswca.com
fsfix.accesswca.com
fs.accesswca.com
fsfix.accesswca.com
www.ctslink.com
www.ctslink.com
www.ctslink.com
fsuat.accesswca.com
fsfix.accesswca.com
wellspafix.wellsfargo.com
directfix.ctslink.com
fix.accesswca.com
direct.ctslink.com
realstp-u.wellsfargo.com
wwwfix.ctslink.com
direct.ctslink.com
www.ctslink.com
www.ctslink.com
www.accesswca.com
wellspa.wellsfargo.com
fs.accesswca.com
ctslink.computershare.com
fix.accesswca.com
www.accesswca.com
fsfix.accesswca.com
direct.ctslink.com
www.ctslink.com
www.ctslink.com
fsfix.accesswca.com
directfix.ctslink.com
fsfix.accesswca.com
fix.accesswca.com
directfix.ctslink.com
fs.accesswca.com
directfix.ctslink.com
wellspafix.wellsfargo.com
fsuat.accesswca.com
fix.accesswca.com
fs.accesswca.com
ctslinkuat.computershare.com
directfix.ctslink.com
fix.accesswca.com
wellspa.wellsfargo.com
fsuat.accesswca.com
fsuat.accesswca.com
fix.accesswca.com
uat.accesswca.com
wellspa.wellsfargo.com
www.ctslink.com
direct.ctslink.com
fix.accesswca.com
uat.accesswca.com
wwwfix.ctslink.com
directfix.ctslink.com
ctslinkuat.computershare.com
www.accesswca.com

Certificate

The complete raw certificate details for directfix.ctslink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1qc9iRkN4pSdG7X9thc
xCumHtSIT/neYfPVh2sXRS66umWz+OfznZwD4Ev385LflX7aLYpx6nDXvPby7lgE
ZkSEi0AigVp+0mSTslRvYaI+I8vP9bD0IUVTHsszjozzt+OuiK0GF6zXNRcjfSGW
5ZMWb5nkfvK/Lf6HY8YuohaOWqCGEEcf2UIkl2i0myJa4h91Vn4dzQPF4OP6kRH5
Dygnq+iyEj2dTjUfCwTTwThN8MNEe1+yqLkPdc/F/tTBO8AanpU9xGXF9P3gMHZd
hygtO8s1U9NQvM+DfTM/CxoFuhvUjfjHfUIIPeLkKGSUrfgQmPzzB4gy+PPq0Fmy
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19385857216126165900425968336503095744
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Organization Validated TLS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Public Trust Certification Authority 01 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TMS-ADCS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'directfix.ctslink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23146292808959820366587684012518450329295875975374656553449303716542872747705432730963726814527920645011761260176363964965883674403811772436809469786471217267264006513705562173861271303843580097627089067246558853666573468464199017557398116258029616450406654497769328153261028291689567742374810618760648884359226459796094265474034982321513806070192235952242438125342580077860632543594548228591749776863423008004396553431312839652545432013222448454940736768346959251677930495040914271767149834276669763105674123535547513930631173058482205114700025657564135822042931652546724715534806750568172140075213188216798733513331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 39139ee141d23a450b388060afb521417c01897d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							637250daa91197292f51b6a9b97eaf68a2987cc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directfix.ctslink.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statush.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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