GDCA_HKMR_OV_CA.cer: CN=GDCA HKMR OV CA,O=Global Digital Cybersecurity Authority Co., Ltd.,C=CN (Intermediate Certificate, Expiring 2030-12-30) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.gdca.com.cn/certdownload/caCertDownLoadServlet?filename=GDCA_HKMR_OV_CA.cer&cn=GDCA%20HKMR%20OV%20CA&name=/GDCA_HKMR_OV_CA.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.gdca.com.cn/certdownload/caCertDownLoadServlet?filename=GDCA_HKMR_OV_CA.cer&cn=GDCA%20HKMR%20OV%20CA&name=/GDCA_HKMR_OV_CA.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3258692706071535205 (0x2d3933c0398cde65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CN, O=Global Digital Cybersecurity Authority Co., Ltd., CN=GDCA ROOT CA1
        Validity
            Not Before: Sep 12 09:42:50 2018 GMT
            Not After : Dec 30 16:00:00 2030 GMT
        Subject: C=CN, O=Global Digital Cybersecurity Authority Co., Ltd., CN=GDCA HKMR OV CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b1:a4:15:a4:d9:da:af:f5:7c:15:22:16:83:
                    c7:82:51:b4:cf:80:ea:86:7b:9d:d8:40:14:a7:f8:
                    49:7f:4f:89:04:9e:25:f0:69:a8:d8:ed:f3:17:cc:
                    9e:59:ce:82:26:5a:ad:86:2c:09:6f:3b:cb:e4:37:
                    6a:68:38:78:d7:aa:5f:a5:f5:34:19:51:53:bb:9e:
                    bc:ff:bb:30:26:64:df:62:e7:e0:e5:85:14:c6:29:
                    bb:85:cb:89:2e:b6:12:5a:9f:26:1f:0e:f6:71:fc:
                    64:cc:c6:e2:8c:8f:f9:d2:73:83:be:7e:97:d8:85:
                    48:ec:07:60:4c:44:3f:e5:01:c8:f7:b6:07:00:67:
                    b9:39:15:32:e9:48:fb:dc:6e:12:66:c2:e2:80:f9:
                    dd:94:db:8d:41:f0:29:a7:30:ee:f9:93:26:b5:ed:
                    80:03:ff:75:66:e0:3b:a1:a2:c8:05:15:be:2c:37:
                    9f:80:60:e8:bc:17:62:40:d8:69:a4:0b:fd:50:69:
                    1c:a2:a6:e7:f4:95:52:cb:39:09:0b:ee:b8:39:de:
                    a5:a7:33:a9:51:6b:fd:1e:73:7e:ce:fb:cf:47:67:
                    83:8b:8b:b0:db:87:84:ad:b2:33:a1:98:11:e0:16:
                    5c:98:f5:2c:da:3a:11:c8:2c:2e:89:90:e9:4c:fb:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                87:46:4E:2C:6A:08:CB:9C:FD:2D:24:78:5C:88:55:C8:EC:EE:37:F1
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Authority Key Identifier: 
                keyid:BC:59:BA:C0:AC:D1:5B:A5:BA:AF:2F:20:95:7E:61:B0:5E:00:C4:2C

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.gdca.com.cn/cps/domestic-cps

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.gdca.com.cn/crl/GDCA_ROOT_CA1.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
    Signature Algorithm: sha256WithRSAEncryption
         34:93:44:25:0e:77:42:31:79:4f:c8:d4:b6:f5:15:d3:5b:06:
         ca:f6:5d:cd:5d:74:c2:78:7e:41:01:8f:0a:f1:a4:ae:76:7e:
         29:6d:25:07:25:4c:c1:6c:ff:74:32:99:24:cb:50:44:7a:e8:
         96:2d:fc:ee:30:53:d9:31:cc:5d:ff:87:dd:8c:2f:f7:14:b0:
         ac:4d:c4:73:eb:b7:57:e8:d7:93:05:b3:4e:be:eb:a1:c4:32:
         2b:d4:75:d1:ba:34:25:12:97:bd:5d:1a:30:cd:20:7d:cb:17:
         ed:95:52:fc:03:c2:47:2b:30:0e:0e:53:ce:51:aa:25:f1:9a:
         52:82:6d:8a:d0:d9:91:10:d3:e7:4e:90:c0:32:3c:88:08:bb:
         4f:f8:79:3f:ac:10:75:1a:91:d7:6a:52:a7:62:ec:d4:ad:2e:
         6d:09:0c:7d:b1:16:f0:74:c4:2c:11:2d:bd:ed:21:d0:c9:07:
         27:6e:45:85:09:60:ca:2f:7d:d7:11:83:d7:ce:73:cc:d2:72:
         ed:8e:16:6b:c4:3a:8d:c7:dd:89:d9:56:f0:c1:bb:75:7b:dd:
         78:5c:14:e3:23:2c:de:b3:ba:9e:27:15:0d:e2:21:ca:c1:80:
         44:e2:a1:ba:a1:c4:1a:91:2a:86:4d:af:b9:f1:bf:4a:c8:3b:
         a1:d9:af:c2:42:a8:ba:b6:30:49:59:7b:47:fa:cd:8e:d6:4f:
         fb:96:3d:88:4c:a3:41:f7:23:e5:d4:ec:f5:a4:6c:f2:bd:7c:
         a8:5e:8b:7e:7e:1b:e2:53:00:f5:f8:1a:89:5c:c7:b9:83:d0:
         fc:aa:d6:8c:1e:17:0e:d6:2f:da:82:41:4c:fe:91:3c:fc:8d:
         0f:36:27:32:08:cc:98:f7:19:a7:43:53:b1:ca:bd:2d:c8:05:
         a3:77:e7:a8:a4:99:68:7d:c6:ca:b9:35:4f:ff:0f:fc:37:b9:
         d1:c4:34:94:0f:88:f0:ca:92:31:00:cc:38:fc:77:35:cd:05:
         02:e0:75:1c:a9:13:41:b5:a5:d1:dc:60:ca:a2:d1:19:ce:4f:
         21:28:82:86:3d:82:5e:0b:22:bf:40:41:84:41:c8:89:41:bb:
         9c:2f:47:5e:da:0b:39:36:d7:25:e3:f0:be:73:dd:9a:e8:c4:
         8a:29:8a:9c:6e:d5:cc:c1:3c:16:f2:11:bf:50:ef:7a:e0:61:
         cd:ac:eb:32:26:3f:cb:29:65:5c:d7:eb:dd:19:d2:e3:32:47:
         a4:1f:6a:7d:0a:31:bc:58:6a:43:5b:1e:60:2f:ed:14:18:3b:
         06:b9:13:2f:08:57:ad:8c:ab:cf:54:e7:52:7f:5d:e7:92:93:
         38:39:bc:76:e5:b8:58:26

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06