GeoTrustEVCNRSAG1.crt: CN=GeoTrust EV CN RSA G1,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2029-06-20) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://crl.digicert-cn.com/GeoTrustEVCNRSAG1.crt" --output cert.crt

Download certificate through wget:

wget -q "http://crl.digicert-cn.com/GeoTrustEVCNRSAG1.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9e:c3:8c:a2:da:d0:0a:58:29:f8:e0:fb:ea:a3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
        Validity
            Not Before: Jun 20 12:28:02 2019 GMT
            Not After : Jun 20 12:28:02 2029 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust EV CN RSA G1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:74:a8:33:e2:a0:b4:cb:10:51:9a:53:60:65:
                    6f:47:45:8c:97:66:0d:21:07:a2:c4:6b:28:b2:cd:
                    39:62:86:b4:6f:7d:60:15:f4:07:a0:d7:9c:73:22:
                    1c:e2:df:62:c3:65:5c:5d:08:b3:97:03:8e:b3:f8:
                    f0:c8:6d:97:e5:42:4d:4f:14:00:42:20:0a:58:b3:
                    33:13:c9:00:78:47:27:87:2c:f9:04:09:7b:68:cc:
                    27:c8:7a:52:ee:23:10:d4:56:e2:b1:c8:57:f4:2a:
                    1d:35:53:3a:52:80:4e:49:e4:65:9b:0e:c2:7c:05:
                    0a:d2:ff:a0:80:6f:a9:41:a0:a5:51:88:73:4b:87:
                    6f:2a:18:d0:a8:28:58:b4:6f:15:5b:a7:9b:10:81:
                    0e:25:5d:90:93:6a:7d:d3:01:6e:65:ff:de:0c:a1:
                    32:47:bb:cd:ae:5a:bc:7e:df:cd:66:6d:b0:96:c9:
                    8a:1c:6f:f8:70:53:7f:3b:dd:95:c2:94:8f:86:80:
                    19:08:80:de:f9:56:d3:df:d4:09:a2:ad:f1:2b:7f:
                    8a:35:49:f3:f0:5a:f1:58:1e:7f:4e:4a:36:60:cc:
                    8e:29:f8:60:7c:22:7b:6a:a8:2a:ab:f4:e5:ed:7a:
                    a4:b6:b9:3a:f5:45:10:fe:3f:e2:a1:d8:2e:a4:a0:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EF:C5:62:8D:95:1B:5A:4A:A6:1B:50:84:08:1A:58:38:F3:68:A1:60
            X509v3 Authority Key Identifier: 
                keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                OCSP - URI:http://ocsp.dcocsp.cn

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert-cn.com/DigiCertHighAssuranceEVRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.2.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.1

    Signature Algorithm: sha256WithRSAEncryption
         a5:20:66:57:93:ec:d7:e0:bf:bc:64:87:c5:b1:e9:ae:13:70:
         03:ed:4a:4d:5f:8e:4a:5f:a3:92:75:77:f5:5d:df:1a:10:31:
         f0:87:1d:0d:7c:2c:6f:28:6f:99:48:ce:1d:8f:06:72:a0:fc:
         48:25:24:ef:62:e8:06:08:f7:89:dc:90:85:38:14:54:bd:e2:
         81:a3:f7:d3:71:7f:27:e8:48:ad:92:20:4e:22:69:e5:3a:c1:
         8b:a3:57:ab:46:0d:c3:0e:cb:9c:0f:6a:38:12:45:14:1d:80:
         80:21:42:7e:45:30:9d:a4:2e:98:f5:7c:da:24:c3:3f:7d:41:
         30:d8:bd:c9:9b:d6:78:6a:e5:04:50:5c:03:1f:46:27:64:d2:
         ee:1c:6b:09:d8:4e:e8:d7:fd:e2:e0:71:d2:73:a3:cd:78:dc:
         45:fa:d8:5d:1f:c0:4d:ac:04:ca:1f:f1:3c:20:d9:fa:50:4d:
         14:87:08:eb:83:85:45:b9:cc:34:a0:72:97:66:2e:26:61:c9:
         ff:87:4e:e6:6f:7e:e1:50:7c:a7:9b:5a:cc:e4:00:32:b7:2a:
         9c:4d:ca:0f:76:c5:a9:89:09:c8:f7:87:d3:86:07:12:08:9a:
         26:aa:17:9a:0e:a6:97:e9:06:c5:68:52:a2:db:8a:52:d8:1b:
         89:b2:0a:75

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06