GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt: CN=GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt (DER format)
  • Serial number: 15995324704398902386293046919426293948
  • SHA-1 Fingerprint: 2f7aa2d86056a8775796f798c481a079e538e004
  • SHA-1 Fingerprint: 2f:7a:a2:d8:60:56:a8:77:57:96:f7:98:c4:81:a0:79:e5:38:e0:04
  • SHA-256 Fingerprint: 8c43c5e340ec640f93ea774ac5353cca9042f764ff837f870d8b64763c458a41
  • SHA-256 Fingerprint: 8c:43:c5:e3:40:ec:64:0f:93:ea:77:4a:c5:35:3c:ca:90:42:f7:64:ff:83:7f:87:0d:8b:64:76:3c:45:8a:41
  • Signature hash algorithm: sha256
  • Subject: CN=GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1,O=DigiCert Inc,C=US
  • Not valid before: 2020-07-16 12:21:44
  • Not valid after: 2023-05-31 23:59:59
  • Issuer:
    • Issuer name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:08:96:65:35:b9:42:a9:73:52:65:e4:f9:75:40:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Jul 16 12:21:44 2020 GMT
            Not After : May 31 23:59:59 2023 GMT
        Subject: C=US, O=DigiCert Inc, CN=GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:41:fb:6b:e6:df:a2:51:bf:54:14:63:c6:
                    75:a6:51:ee:e3:88:a7:3a:78:a0:9b:9e:5b:91:7c:
                    a5:a8:59:33:fa:c6:6c:07:50:33:99:79:fa:53:f1:
                    cc:16:dd:e5:a6:99:61:d3:4d:a2:ef:93:94:02:e4:
                    c4:c9:5f:97:d1:1a:6e:09:da:34:54:0b:b2:38:c6:
                    dd:4d:ad:71:7d:ba:de:9b:ed:cb:49:a0:4b:c3:63:
                    a7:7f:33:64:b7:c7:ba:76:73:d2:1b:52:86:ae:9c:
                    12:e4:e7:a0:ab:7c:f3:ef:aa:d5:da:85:23:08:68:
                    2b:1c:78:e6:9b:af:b4:66:fe:47:d5:c1:8b:63:2c:
                    5c:cc:02:f2:11:de:d0:e9:a4:0c:8d:b9:f9:9a:cc:
                    eb:cc:83:ab:5d:84:e0:aa:ed:19:df:8f:3b:55:3a:
                    43:b6:5c:11:4e:5a:f4:31:b6:ea:bd:64:68:58:10:
                    99:66:b2:be:f3:9f:1a:85:83:12:a8:d7:02:5f:ec:
                    27:1e:6f:df:8f:80:c7:47:ed:de:4b:33:d3:1f:78:
                    b4:19:3b:8b:13:d5:f3:5a:f3:53:73:dd:94:29:24:
                    5b:6d:59:16:cf:01:c9:2e:eb:50:45:0e:99:f9:b6:
                    de:45:27:a4:5e:30:6f:8f:c3:cd:47:67:08:2d:31:
                    88:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                12:C9:88:9B:2F:C9:44:7A:7D:12:F1:DF:40:03:42:98:92:C7:24:D6
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua

    Signature Algorithm: sha256WithRSAEncryption
         7f:4b:fc:33:ba:65:45:c2:d8:41:6b:8e:48:ab:3c:02:c8:fa:
         11:b0:e6:1e:71:4e:cc:57:f7:b5:74:73:f9:22:b3:66:d3:ab:
         97:94:0b:27:c9:0e:ec:68:1a:72:45:0b:a8:87:5a:14:c4:ba:
         8b:17:8d:b3:b1:a5:76:07:4a:0e:98:52:b0:f6:02:ab:85:96:
         ff:42:0a:c2:f3:af:50:01:3d:c6:c7:f5:83:4b:4c:e2:c7:e3:
         00:d4:df:38:61:f3:e9:14:91:4b:78:82:cc:a6:9e:7a:b2:a6:
         3a:fa:90:f8:05:29:51:20:72:cc:4a:bd:23:ec:3c:6b:cb:58:
         6b:27:24:56:2d:de:dc:1e:bb:3b:ba:a1:e7:56:0a:02:81:28:
         47:f5:7b:2d:cb:9d:13:b8:79:59:eb:40:79:9a:e9:7a:fc:6e:
         f9:fa:9a:41:0b:3b:66:7b:87:33:40:29:f3:21:c6:19:ff:c9:
         44:f5:94:9f:f1:14:67:e8:7c:13:d6:bd:23:13:cd:2b:27:d5:
         fe:8b:ba:6d:f3:ea:58:bc:17:ac:d1:4e:99:3c:89:c1:2a:ed:
         7f:96:c0:42:84:c9:1c:31:cb:33:47:a1:e5:f6:95:39:90:9d:
         f5:aa:2b:56:a1:0b:4d:f2:f5:4f:cd:48:11:8e:88:ae:c5:72:
         57:a5:3d:12

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIQDAiWZTW5QqlzUmXk+XVAvDANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
QTAeFw0yMDA3MTYxMjIxNDRaFw0yMzA1MzEyMzU5NTlaMFkxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxMzAxBgNVBAMTKkdlb1RydXN0IFRMUyBE
ViBSU0EgTWl4ZWQgU0hBMjU2IDIwMjAgQ0EtMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALO9Qftr5t+iUb9UFGPGdaZR7uOIpzp4oJueW5F8pahZM/rG
bAdQM5l5+lPxzBbd5aaZYdNNou+TlALkxMlfl9EabgnaNFQLsjjG3U2tcX263pvt
y0mgS8Njp38zZLfHunZz0htShq6cEuTnoKt88++q1dqFIwhoKxx45puvtGb+R9XB
i2MsXMwC8hHe0OmkDI25+ZrM68yDq12E4KrtGd+PO1U6Q7ZcEU5a9DG26r1kaFgQ
mWayvvOfGoWDEqjXAl/sJx5v34+Ax0ft3ksz0x94tBk7ixPV81rzU3PdlCkkW21Z
Fs8ByS7rUEUOmfm23kUnpF4wb4/DzUdnCC0xiMkCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBQSyYibL8lEen0S8d9AA0KYksck1jAfBgNVHSMEGDAWgBQD3lA1VtFMu2bw
o+IbG8OXsj3RVTAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMBIGA1UdEwEB/wQIMAYBAf8CAQAwNAYIKwYBBQUHAQEEKDAmMCQG
CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3
oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9v
dENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0
R2xvYmFsUm9vdENBLmNybDCBzgYDVR0gBIHGMIHDMIHABgRVHSAAMIG3MCgGCCsG
AQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGKBggrBgEFBQcC
AjB+DHxBbnkgdXNlIG9mIHRoaXMgQ2VydGlmaWNhdGUgY29uc3RpdHV0ZXMgYWNj
ZXB0YW5jZSBvZiB0aGUgUmVseWluZyBQYXJ0eSBBZ3JlZW1lbnQgbG9jYXRlZCBh
dCBodHRwczovL3d3dy5kaWdpY2VydC5jb20vcnBhLXVhMA0GCSqGSIb3DQEBCwUA
A4IBAQB/S/wzumVFwthBa45IqzwCyPoRsOYecU7MV/e1dHP5IrNm06uXlAsnyQ7s
aBpyRQuoh1oUxLqLF42zsaV2B0oOmFKw9gKrhZb/QgrC869QAT3Gx/WDS0zix+MA
1N84YfPpFJFLeILMpp56sqY6+pD4BSlRIHLMSr0j7Dxry1hrJyRWLd7cHrs7uqHn
VgoCgShH9Xsty50TuHlZ60B5mul6/G75+ppBCztme4czQCnzIcYZ/8lE9ZSf8RRn
6HwT1r0jE80rJ9X+i7pt8+pYvBes0U6ZPInBKu1/lsBChMkcMcszR6Hl9pU5kJ31
qitWoQtN8vVPzUgRjoiuxXJXpT0S
-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26