gts2d4.der: CN=GTS CA 2D4,O=Google Trust Services LLC,C=US (Intermediate Certificate, Expiring 2027-09-30) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://pki.goog/repo/certs/gts2d4.der (in DER format )
Serial Number : 165391865402475650516762930484
SHA-1 Fingerprint : 286e1c75bad591583ea61780d604ba5171240ca4
SHA-1 Fingerprint : 28:6e:1c:75:ba:d5:91:58:3e:a6:17:80:d6:04:ba:51:71:24:0c:a4
SHA-256 Fingerprint : 834b5be6bd66a404f68f6ec9de1c1e5c5723dda65a7d3f66fb6209969d8854d8
SHA-256 Fingerprint : 83:4b:5b:e6:bd:66:a4:04:f6:8f:6e:c9:de:1c:1e:5c:57:23:dd:a6:5a:7d:3f:66:fb:62:09:96:9d:88:54:d8
Signature Hash Algorithm : sha256
Subject : CN=GTS CA 2D4,O=Google Trust Services LLC,C=US
- Country Name: US (United States of America)
- Organization: Google Trust Services LLC
- Common Name: GTS CA 2D4
Not Valid Before: 2022-10-05 00:00:42
Not Valid After: 2027-09-30 00:00:42
Issuer (Parent Certificate):
- Issuer Name: CN=GlobalSign,O=GlobalSign,OU=GlobalSign ECC Root CA - R4
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=GlobalSign,O=GlobalSign,OU=GlobalSign ECC Root CA - R4 .

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/gts2d4.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/gts2d4.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:16:68:f1:cd:0a:2a:8f:84:7d:8a:ad:34
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign
        Validity
            Not Before: Oct  5 00:00:42 2022 GMT
            Not After : Sep 30 00:00:42 2027 GMT
        Subject: C=US, O=Google Trust Services LLC, CN=GTS CA 2D4
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:f4:1d:09:d5:7a:d7:df:74:30:fb:9e:19:35:69:
                    5c:08:d1:9a:9d:89:23:1b:74:62:ec:b9:f5:16:58:
                    4f:f5:ca:83:59:4d:82:94:5c:d1:e8:7f:6c:7b:69:
                    7a:18:a0:b6:a7:be:96:52:93:89:51:24:32:14:8c:
                    51:1a:10:42:c3
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                A8:88:D9:8A:39:AC:65:D5:82:4B:37:A8:95:6C:65:43:CD:44:01:E0
            X509v3 Authority Key Identifier: 
                keyid:54:B0:7B:AD:45:B8:E2:40:7F:FB:0A:6E:FB:BE:33:C9:3C:A3:84:D5

            Authority Information Access: 
                OCSP - URI:http://ocsp.pki.goog/gsr4
                CA Issuers - URI:http://pki.goog/repo/certs/gsr4.der

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.pki.goog/gsr4/gsr4.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.11129.2.5.3
                  CPS: https://pki.goog/repository/

    Signature Algorithm: ecdsa-with-SHA256
         30:44:02:20:62:fa:29:25:8b:56:01:1d:01:ac:6f:99:a7:c8:
         1a:39:9b:27:70:d3:8a:37:f3:a0:4f:81:a3:e9:88:1c:e0:6a:
         02:20:6d:ca:70:40:90:9a:94:b2:1e:92:ff:17:44:ca:16:16:
         bd:e7:57:95:c9:7d:64:54:e5:03:e9:39:7d:2b:5d:b8

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates