GeoTrustECCCA2018.crt: CN=GeoTrust ECC CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.geotrust.com/GeoTrustECCCA2018.crt (DER format)
  • Serial number: 20084456394114493592413865692264783194
  • SHA-1 Fingerprint: 0230feebdb5087ea5b75b046e25c8542738efe86
  • SHA-1 Fingerprint: 02:30:fe:eb:db:50:87:ea:5b:75:b0:46:e2:5c:85:42:73:8e:fe:86
  • SHA-256 Fingerprint: d8e269a6eb08cbc337ad6578c72135787484c99d2fb08cced029e806be1040fc
  • SHA-256 Fingerprint: d8:e2:69:a6:eb:08:cb:c3:37:ad:65:78:c7:21:35:78:74:84:c9:9d:2f:b0:8c:ce:d0:29:e8:06:be:10:40:fc
  • Signature hash algorithm: sha256
  • Subject: CN=GeoTrust ECC CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US
  • Not valid before: 2017-11-06 12:24:09
  • Not valid after: 2027-11-06 12:24:09
  • Issuer:
    • Issuer name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.geotrust.com/GeoTrustECCCA2018.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.geotrust.com/GeoTrustECCCA2018.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1c:20:27:3b:1e:33:42:2d:67:33:81:17:89:dd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Nov  6 12:24:09 2017 GMT
            Not After : Nov  6 12:24:09 2027 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust ECC CA 2018
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:be:a3:09:7e:b7:4d:49:35:65:4c:02:22:95:cc:
                    a8:9f:62:8b:d8:51:1f:34:57:17:f5:5e:c3:1e:09:
                    cf:e5:c0:a4:da:f1:56:17:59:28:0e:5b:9e:f5:3c:
                    4b:00:b0:43:78:3f:cc:10:e6:f0:f5:77:bc:f7:7e:
                    9a:9a:8f:ea:56
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EE:9A:2E:46:F0:C2:DA:3C:5C:C7:8C:D6:A4:75:98:DE:A8:19:0A:65
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         6f:e9:16:7e:b5:5b:76:f2:d7:fc:e4:1d:9b:5f:74:35:a9:ec:
         5b:16:25:68:b0:bb:5f:e9:9c:e2:25:f9:5d:1d:1f:a2:3b:09:
         98:2c:42:05:d6:06:72:f6:8b:6c:11:c4:82:40:0c:3a:10:07:
         a3:f5:63:ab:ea:88:f7:53:ca:bf:db:47:0d:8f:25:2f:d6:b0:
         44:5e:88:53:67:85:d2:f4:ec:47:8b:c2:a3:92:8b:00:40:68:
         c0:35:16:39:81:48:fc:15:42:7f:cd:13:17:b0:2c:2e:18:02:
         ea:d1:70:f4:07:13:6b:ab:78:d7:77:e6:02:fc:bc:c0:a5:9a:
         91:ab:8a:69:02:39:6a:2a:46:94:02:7f:c4:46:53:9c:36:93:
         11:3a:e6:00:1d:df:79:15:f8:de:d2:18:77:e5:cf:0c:d9:35:
         2f:d2:c8:3b:f5:8d:6d:57:d2:e5:b5:00:da:13:77:cf:93:b5:
         be:46:84:b2:66:e0:50:1d:15:4a:52:25:49:e0:26:c2:38:3f:
         6e:d0:8e:96:35:b6:a5:68:fb:9f:0e:24:f2:ae:0d:d6:29:cb:
         24:73:a9:68:c1:b3:ec:87:5f:61:f1:78:b5:f5:66:4c:9b:14:
         80:22:09:b3:b4:cc:df:ec:76:92:d0:67:95:ea:6f:30:b6:61:
         43:ca:96:69

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIDwDCCAqigAwIBAgIQDxwgJzseM0ItZzOBF4ndWjANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
QTAeFw0xNzExMDYxMjI0MDlaFw0yNzExMDYxMjI0MDlaMF4xCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
b20xHTAbBgNVBAMTFEdlb1RydXN0IEVDQyBDQSAyMDE4MFkwEwYHKoZIzj0CAQYI
KoZIzj0DAQcDQgAEvqMJfrdNSTVlTAIilcyon2KL2FEfNFcX9V7DHgnP5cCk2vFW
F1koDlue9TxLALBDeD/MEObw9Xe8936amo/qVqOCAUAwggE8MB0GA1UdDgQWBBTu
mi5G8MLaPFzHjNakdZjeqBkKZTAfBgNVHSMEGDAWgBQD3lA1VtFMu2bwo+IbG8OX
sj3RVTAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMBIGA1UdEwEB/wQIMAYBAf8CAQAwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUF
BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQgYDVR0fBDswOTA3oDWgM4Yx
aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNy
bDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu
ZGlnaWNlcnQuY29tL0NQUzANBgkqhkiG9w0BAQsFAAOCAQEAb+kWfrVbdvLX/OQd
m190NansWxYlaLC7X+mc4iX5XR0fojsJmCxCBdYGcvaLbBHEgkAMOhAHo/Vjq+qI
91PKv9tHDY8lL9awRF6IU2eF0vTsR4vCo5KLAEBowDUWOYFI/BVCf80TF7AsLhgC
6tFw9AcTa6t413fmAvy8wKWakauKaQI5aipGlAJ/xEZTnDaTETrmAB3feRX43tIY
d+XPDNk1L9LIO/WNbVfS5bUA2hN3z5O1vkaEsmbgUB0VSlIlSeAmwjg/btCOljW2
pWj7nw4k8q4N1inLJHOpaMGz7IdfYfF4tfVmTJsUgCIJs7TM3+x2ktBnlepvMLZh
Q8qWaQ==
-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26