www.wellsfargoassetmanagement.com

- Wells Fargo & Company -

Issued by Wells Fargo Public Trust Certification Authority 01 G2

About this certificate

This digital certificate with serial number 07:81:21:33:19:57:3f:b2:e1:4a:75:d3:af:3f:14:de was issued on by Wells Fargo & Company.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: Secure Environments
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: Organization Validated TLS
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:81:21:33:19:57:3f:b2:e1:4a:75:d3:af:3f:14:de
Serial Number (int): 9975075633241215207695173701582394590
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ff:e5:7d:a5:57:36:df:ef:9b:a8:dc:62:15:67:bf:4a:e4:23:77:b7
AuthorityKeyId: 39:13:9e:e1:41:d2:3a:45:0b:38:80:60:af:b5:21:41:7c:01:89:7d

Fingerprint (sha1): 5b:25:6c:09:d9:79:db:dd:7e:0e:14:52:1e:5b:7a:80:3b:89:06:24
Fingerprint (sha256): dd:c1:e2:6e:00:45:78:d4:1d:8c:96:d4:d7:84:75:5c:be:e1:32:60:19:ee:d7:2d:b9:b8:55:c6:92:55:64:2b

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt

Revocation information

OCSP Server: http://statush.digitalcertvalidation.com
CRL Distribution Point: http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl

Check the revocation status for certificate www.wellsfargoassetmanagement.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wellsfargoassetmanagement.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.wellsfargoassetmanagement.com

Other certificates including the domain name wellsfargoassetmanagement.com

(limited to 100 certificates)
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
maint.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
maint.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
maint.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com

Certificate

The complete raw certificate details for www.wellsfargoassetmanagement.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4XbdX6ukmYvi3Gtos49
Lc+zVus5ddrkWdo2pe3cdWr3ysg2/CHbFQgiREELQcao263aIJhtTFo0h7nJVVoa
X4TS85+iy7EcVR6tj4okfjUtWjZwRAMIHVwWVOJlNa22On7ltWoWENdeW4rF6eIG
PEfO4dKqu/KepRJD1/1ELkEPMNmlXcP6x5IyfBKn0aScWCrRs93KZLvN5A8GsSDU
bhBEc6Iy0cvEqlyDKMICi0TPN4DJ0aWd7KhufEY5YndBWhC9CioEsJIU9PSoXNzV
xmmDr4MUpfhtyjDdXyT8+neU5TPDkURILObXzeeNH3z3GT9Ei/3+trQsErerolmY
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9975075633241215207695173701582394590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Organization Validated TLS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Public Trust Certification Authority 01 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Environments'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wellsfargoassetmanagement.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19127991525691845616536932568078686166167162876824451170114995369612414803906055006369635353537567659064709279822374341757239914747801000093306533476851850072677006139077313160680518714136224862480254443310418251607868291014174609108287862002733423859062225020387659718123050354643149067099985952580892135120241485279143200706030298254465870678634192009905209355988700572942011618382491612377922121596129401828604284857424812629509244769729338128270675096973352810812731436675365400436637646292193186028089374812001196862945184614674578010884076437166568262568457434649647750795619807182175133333261306124690165176341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 39139ee141d23a450b388060afb521417c01897d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffe57da55736dfef9ba8dc621567bf4ae42377b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfargoassetmanagement.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statush.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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