attca.cer: O=Cisco,CN=Attestation CA (Intermediate Certificate, Expiring 2099-08-09) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.cisco.com/security/pki/certs/attca.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.cisco.com/security/pki/certs/attca.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c0:8a:03:56:c2:b8:72:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: O=Cisco, CN=Cisco Root CA 2099
        Validity
            Not Before: Aug 11 20:32:42 2016 GMT
            Not After : Aug  9 20:58:27 2099 GMT
        Subject: CN=Attestation CA, O=Cisco
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fd:fc:7d:42:9e:8e:4e:c4:9e:f1:aa:96:59:
                    9a:79:df:ba:e1:ca:86:15:d0:4e:3c:fa:75:49:23:
                    99:b2:66:51:7b:05:1c:c0:8d:8a:46:e4:2e:04:e3:
                    aa:0b:1b:49:f7:8e:1b:49:15:14:02:42:0b:65:e4:
                    32:c5:a0:8e:e2:d5:f2:56:87:5c:06:3f:b5:15:ab:
                    83:21:c9:ed:19:2a:a9:44:e1:ed:92:e6:84:d1:4f:
                    c5:06:a3:0d:d6:aa:68:f0:cd:c8:aa:65:82:5f:0a:
                    85:7c:05:fa:7d:67:e0:f4:2e:1f:8e:5d:50:4d:d3:
                    a7:83:fc:d0:05:59:e1:f3:66:a3:0e:67:e3:4f:59:
                    22:97:23:39:87:d2:88:b8:90:f1:f2:03:f6:18:58:
                    dc:60:15:87:9b:a0:7c:b6:cb:2a:1a:23:0a:88:c2:
                    36:04:fe:83:34:78:20:ce:9a:9b:31:e4:bb:56:2c:
                    b9:fe:e6:50:57:7c:bc:9b:5d:01:67:a4:1a:da:f5:
                    5d:40:76:80:9e:f6:bd:7c:2a:57:49:5f:e2:e1:70:
                    ec:61:ce:fa:14:44:aa:88:11:2e:1b:45:ff:bb:87:
                    e8:2a:15:3b:f7:e6:71:41:58:21:3f:82:31:22:b3:
                    c4:90:1b:78:84:d2:77:5d:d6:08:dc:d2:5d:88:97:
                    ad:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                CA Issuers - URI:https://www.cisco.com/security/pki/certs/crca2099.cer
                OCSP - URI:http://pkicvs.cisco.com/pki/ocsp

            X509v3 Authority Key Identifier: 
                keyid:38:95:57:0F:34:23:4E:F3:A1:26:20:BA:14:91:C7:41:88:1D:A3:5B

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.9.21.1.28.0
                  CPS: http://www.cisco.com/security/pki/policies/

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://www.cisco.com/security/pki/crl/crca2099.crl

            X509v3 Subject Key Identifier: 
                00:1E:BA:0F:D7:D9:E7:3D:90:B2:0C:E4:A8:ED:C7:F3:2C:44:EC:A6
    Signature Algorithm: sha256WithRSAEncryption
         87:25:e5:6c:b6:19:45:6e:82:c5:1b:d5:a1:b6:f8:1a:fb:7c:
         1c:51:ca:09:aa:b1:d3:23:db:9c:30:23:92:dc:ea:df:fc:ab:
         6f:a4:de:bd:d2:13:16:dd:94:55:98:ce:ef:cf:f2:25:10:02:
         19:f7:f3:f1:d9:5a:06:75:69:f0:b1:0c:70:16:53:ce:cd:ad:
         bc:fe:a0:92:38:29:b6:a0:be:14:55:74:fb:c9:42:77:1c:e8:
         79:1c:7a:bd:a5:60:a5:df:42:3d:ba:5f:2d:1a:78:c1:ec:29:
         fe:98:57:a2:74:6c:84:dc:56:5d:d5:60:93:69:4a:fe:8d:e7:
         8e:0b:9c:ff:98:c8:e5:23:f3:7a:31:4c:30:93:85:66:0a:c4:
         c6:19:9c:29:10:d5:6a:9f:5f:26:2f:c9:3a:2c:ce:fb:54:30:
         a7:d8:4f:12:d8:41:12:5b:fd:52:4b:00:e0:d2:84:76:2c:0d:
         8d:33:a1:3c:1e:86:53:bc:14:5e:b4:85:13:94:af:7f:96:15:
         00:fc:4a:97:41:a4:c3:9b:a5:49:38:96:33:b5:2c:9d:2d:51:
         69:77:c1:3e:aa:ec:47:54:a5:cc:84:10:96:be:01:f3:91:33:
         4c:1b:8a:1e:f9:42:44:21:0f:41:97:20:dc:22:2d:9f:76:fc:
         52:d3:cb:2d

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIEXzCCA0egAwIBAgIJCsCKA1bCuHJDMA0GCSqGSIb3DQEBCwUAMC0xDjAMBgNV
BAoTBUNpc2NvMRswGQYDVQQDExJDaXNjbyBSb290IENBIDIwOTkwIBcNMTYwODEx
MjAzMjQyWhgPMjA5OTA4MDkyMDU4MjdaMCkxFzAVBgNVBAMTDkF0dGVzdGF0aW9u
IENBMQ4wDAYDVQQKEwVDaXNjbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPH9/H1Cno5OxJ7xqpZZmnnfuuHKhhXQTjz6dUkjmbJmUXsFHMCNikbkLgTj
qgsbSfeOG0kVFAJCC2XkMsWgjuLV8laHXAY/tRWrgyHJ7RkqqUTh7ZLmhNFPxQaj
DdaqaPDNyKplgl8KhXwF+n1n4PQuH45dUE3Tp4P80AVZ4fNmow5n409ZIpcjOYfS
iLiQ8fID9hhY3GAVh5ugfLbLKhojCojCNgT+gzR4IM6amzHku1Ysuf7mUFd8vJtd
AWekGtr1XUB2gJ72vXwqV0lf4uFw7GHO+hREqogRLhtF/7uH6CoVO/fmcUFYIT+C
MSKzxJAbeITSd13WCNzSXYiXrTMCAwEAAaOCAYIwggF+MA4GA1UdDwEB/wQEAwIB
BjASBgNVHRMBAf8ECDAGAQH/AgEAMH8GCCsGAQUFBwEBBHMwcTBBBggrBgEFBQcw
AoY1aHR0cHM6Ly93d3cuY2lzY28uY29tL3NlY3VyaXR5L3BraS9jZXJ0cy9jcmNh
MjA5OS5jZXIwLAYIKwYBBQUHMAGGIGh0dHA6Ly9wa2ljdnMuY2lzY28uY29tL3Br
aS9vY3NwMB8GA1UdIwQYMBaAFDiVVw80I07zoSYguhSRx0GIHaNbMFIGA1UdIARL
MEkwRwYKKwYBBAEJFQEcADA5MDcGCCsGAQUFBwIBFitodHRwOi8vd3d3LmNpc2Nv
LmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvMEMGA1UdHwQ8MDowOKA2oDSGMmh0
dHA6Ly93d3cuY2lzY28uY29tL3NlY3VyaXR5L3BraS9jcmwvY3JjYTIwOTkuY3Js
MB0GA1UdDgQWBBQAHroP19nnPZCyDOSo7cfzLETspjANBgkqhkiG9w0BAQsFAAOC
AQEAhyXlbLYZRW6CxRvVobb4Gvt8HFHKCaqx0yPbnDAjktzq3/yrb6TevdITFt2U
VZjO78/yJRACGffz8dlaBnVp8LEMcBZTzs2tvP6gkjgptqC+FFV0+8lCdxzoeRx6
vaVgpd9CPbpfLRp4wewp/phXonRshNxWXdVgk2lK/o3njguc/5jI5SPzejFMMJOF
ZgrExhmcKRDVap9fJi/JOizO+1Qwp9hPEthBElv9UksA4NKEdiwNjTOhPB6GU7wU
XrSFE5Svf5YVAPxKl0Gkw5ulSTiWM7UsnS1RaXfBPqrsR1SlzIQQlr4B85EzTBuK
HvlCRCEPQZcg3CItn3b8UtPLLQ==
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06