WellsFargoPublicTrustCertificationAuthority01G2.crt: CN=Wells Fargo Public Trust Certification Authority 01 G2,OU=Organization Validated TLS,O=Wells Fargo & Company,C=US (Intermediate Certificate, Expiring 2027-11-15) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt" --output cert.crt

Download certificate through wget:

wget -q "http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:67:a8:e8:f0:24:04:3e:26:8e:74:f9:5e:ea:56:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
        Validity
            Not Before: Nov 15 12:31:52 2017 GMT
            Not After : Nov 15 12:31:52 2027 GMT
        Subject: C=US, O=Wells Fargo & Company, OU=Organization Validated TLS, CN=Wells Fargo Public Trust Certification Authority 01 G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:83:7c:9b:61:7e:e6:f6:b2:b3:d2:de:93:dc:
                    b2:fd:b4:0c:5e:dc:a0:ab:c5:2d:24:78:a4:d2:40:
                    b5:10:07:db:11:99:c0:b7:65:97:86:fd:a6:9e:97:
                    9d:20:5f:69:ec:40:85:43:bd:b9:ec:34:7f:b0:7f:
                    ed:44:11:de:02:49:21:03:37:2d:cb:11:f0:6c:5b:
                    66:7d:e1:92:36:e9:ff:45:49:32:cb:2a:69:96:8a:
                    7f:ad:8a:ff:22:15:4a:e6:6d:ac:b4:33:e5:ae:45:
                    bc:d1:55:c5:77:03:40:05:01:78:28:43:7e:70:c9:
                    82:a9:f6:54:5c:d1:de:39:39:28:77:c6:a3:02:23:
                    98:d0:5d:d2:87:37:b7:b3:48:f8:91:75:dd:76:3a:
                    89:90:28:ae:db:ff:6e:a4:00:8d:d5:59:88:11:9d:
                    97:97:53:36:91:51:88:3b:67:ba:f1:92:62:5c:5a:
                    44:f0:a8:2b:70:da:43:56:6a:71:4b:d0:d4:5e:bd:
                    7b:b1:d5:96:41:ef:f0:43:96:89:a4:94:0b:eb:d6:
                    8b:cb:cb:dc:bb:b9:a3:67:f7:e7:70:04:20:ee:aa:
                    8e:15:d3:a8:1e:c3:40:ac:0b:7a:b6:46:c6:81:d2:
                    ee:dc:4e:d6:03:36:8c:87:48:cc:b6:31:c4:98:07:
                    c9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                39:13:9E:E1:41:D2:3A:45:0B:38:80:60:AF:B5:21:41:7C:01:89:7D
            X509v3 Authority Key Identifier: 
                keyid:4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.2.2

    Signature Algorithm: sha256WithRSAEncryption
         ba:52:3b:38:de:e6:6e:6e:34:3d:dd:05:ba:b6:db:60:d9:50:
         c6:df:3b:65:b3:34:78:5e:94:36:81:68:c0:8b:e5:ac:0f:7b:
         da:cd:7d:bb:b6:cd:97:0e:b3:bf:05:ef:fe:ea:30:9f:bf:c3:
         be:fd:33:78:c1:6b:e6:51:cf:19:7a:4e:f4:18:1b:35:d0:81:
         1e:bb:89:f9:2c:be:ce:19:41:af:05:16:f7:58:e4:18:a2:e5:
         65:29:1e:40:66:4e:ee:f3:a7:d7:a7:b4:ef:ae:d9:6f:1a:e5:
         b6:3e:1e:c5:23:05:8b:1c:c0:ec:3d:bc:0b:ad:3b:e0:d7:08:
         63:94:1f:27:0b:ab:46:8b:b2:01:da:39:e4:7d:84:9f:93:c6:
         35:16:f4:b7:b9:de:ab:d9:a7:fb:4e:15:36:52:57:a5:68:84:
         99:3d:aa:8d:77:a9:c6:4d:50:f4:0c:36:fa:8e:63:da:ab:fd:
         d5:6b:80:49:8c:12:0f:d4:69:24:0d:26:78:d0:1b:ab:72:83:
         1e:13:60:ff:45:c1:da:f3:c7:4f:ca:3a:41:27:5e:39:a2:d5:
         dc:20:e5:0a:47:21:a6:0e:c3:10:1b:51:3a:01:61:65:dc:70:
         87:bf:01:dc:66:d2:00:d9:ff:5b:91:46:0a:d4:71:bd:7a:4e:
         f9:9b:b2:80

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06