www.wellsfargoassetmanagement.com

- Wells Fargo & Company -

Issued by Wells Fargo Public Trust Certification Authority 01 G2

About this certificate

This digital certificate with serial number 02:70:89:0d:56:be:70:62:c6:03:97:e3:3b:25:02:85 was issued on by Wells Fargo & Company.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Organization: Wells Fargo & Company
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: Organization Validated TLS
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:70:89:0d:56:be:70:62:c6:03:97:e3:3b:25:02:85
Serial Number (int): 3242772986653482881945370322901729925
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e9:ef:63:62:56:39:8c:20:0c:34:db:78:b6:1e:72:91:36:29:c4:ed
AuthorityKeyId: 39:13:9e:e1:41:d2:3a:45:0b:38:80:60:af:b5:21:41:7c:01:89:7d

Fingerprint (sha1): e1:a7:37:23:ee:94:90:bc:9c:16:d5:26:87:5c:78:b2:41:c3:e1:b2
Fingerprint (sha256): f2:8e:ba:d7:59:50:e9:bd:5c:07:b0:69:8d:69:7b:dc:99:11:c8:fa:83:3a:45:e6:45:72:d5:fe:b7:70:c1:c3

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt

Revocation information

OCSP Server: http://statush.digitalcertvalidation.com
CRL Distribution Point: http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl

Check the revocation status for certificate www.wellsfargoassetmanagement.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wellsfargoassetmanagement.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.wellsfargoassetmanagement.com
www.wfam.com
wfam.com
wellsfargoassetmanagement.com
assetmanagement.wfam.com

Other certificates including the domain name wellsfargoassetmanagement.com

(limited to 100 certificates)
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
maint.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
maint.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
maint.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
staging.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
media.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com
uat.wellsfargoassetmanagement.com
www.wellsfargoassetmanagement.com

Certificate

The complete raw certificate details for www.wellsfargoassetmanagement.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQu2saonk8GQZC0KAIG9
/SGiY7jlSrs9BlorKS9dWxmATRjP96ZeLFTHXzxpq88OZzsNEMV6TrKr33hZgpH9
RMZSGPhPZUSWt0qJdaJ5MpcSa46a17BdmjoxMz5Kl6+KmbdCkMz62RO63dsgJHec
ag2gkmGCvyo774jY3dTkznzqnVVD5So7UV7RDWZo1Yiw0vpt1GybaHEvWkz86f9D
zjqNcEQx29qBX7Sy8V5LAVL9j5JehvlueQh4Yco4P8+V651KvAQGefN+xKYS94RK
G2e4DeKSEja+6B0mcpVw2o1MJZk4yy3qwzy5oCPTq02i6E0eqb6AjiJKqdxi46cE
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3242772986653482881945370322901729925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Organization Validated TLS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Public Trust Certification Authority 01 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wellsfargoassetmanagement.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22854909414188649573236276255362508438229598360180768345878006681560921555091803419843622595833083210625006565945773874944785315579462401804669151101140140323042107456812092408759359545519303367854940030053758035497302723053801811575551551534211620140031125562640096208232207213215819978969979649943037163529244413690189013494428128588597860025745981916845397319993687574792878308342276001111763562427110691811037471512629797080186938679778204930533013859514926756637695097473108588165508099555579674814658330031636185353944073046187792130993272150557348230527207751880277286537182581244239627331113091801018549077237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 39139ee141d23a450b388060afb521417c01897d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9ef636256398c200c34db78b61e72913629c4ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfargoassetmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wfam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfargoassetmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.wfam.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statush.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00729f029d20e819d767d07f006e43e534879b33733dd94cc24375e2bbcfcc0f7ec3693b839d9b8544bd477cb5dfbaf1809306924907e49b0add966896031f368c58c31f7ce54790049535351b469c5e36d0163955258d5dce19a419daa6276195ad3028490f0f21f43262d0ee70b2de094b5c44ab00286e78ed273e8e34bb527ffc915d40c8457a4ccced3ee5bab454898390c78dbb07a5bc32e315ecf66fac38370cedc81aac09f412837fb062113c3e84b536554e670cb20ddc5ab4fefb00f40877d0508fca6c547e7b6d841fb5f68bc412d9f45b37814dd50089e9851219db7a569ae18337c8834c924710aa7f811561d1155707c0f768aba96d2b61d2aa16