iotroote60.crt: CN=GlobalSign IoT Root E60,O=GlobalSign nv-sa,C=BE (Root Certificate, Expiring 2060-03-18) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://secure.globalsign.com/cacert/iotroote60.crt" --output cert.crt

Download certificate through wget:

wget -q "https://secure.globalsign.com/cacert/iotroote60.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:53:fe:b5:6a:c8:ee:4e:8a:c6:fe:5e:9e:38:f5:eb
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign IoT Root E60
        Validity
            Not Before: Mar 18 00:00:00 2020 GMT
            Not After : Mar 18 00:00:00 2060 GMT
        Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign IoT Root E60
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:ca:9e:91:00:0f:0d:a0:ce:23:36:f7:8f:55:8f:
                    8c:af:26:1b:1a:6b:ef:d1:29:e6:14:50:d7:c4:00:
                    d2:71:99:25:f5:f5:0c:1d:0e:70:09:c0:af:13:b4:
                    69:03:48:04:ac:b4:61:6b:b6:95:ef:a8:48:6e:ea:
                    bd:50:d4:74:12:a9:a2:37:9c:1c:ba:59:7c:17:6f:
                    fc:da:7f:c1:e2:a5:1d:66:6e:83:6d:4c:68:e9:82:
                    ce:c1:70:88:24:7d:60
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                8C:93:F0:1E:2C:F5:D4:8C:59:1D:BF:6C:CA:15:8F:32:64:16:F7:86
    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:31:00:a9:0a:77:06:ed:e2:ad:94:65:5f:2a:b5:e2:
         49:d1:f7:a8:94:86:9b:48:8b:db:e2:f1:f9:d7:e8:75:11:99:
         94:bd:d8:9f:c6:4e:c5:e8:eb:7b:4f:78:d8:d3:77:55:56:02:
         30:37:46:36:39:4c:ed:02:9f:f1:9c:17:5f:a7:b2:e9:ba:24:
         56:d5:e3:b1:e3:de:84:aa:d9:02:0d:8f:56:64:01:61:6e:81:
         34:6d:9f:4c:bd:10:4e:eb:e3:57:c0:36:55

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06