TrustAsiaOVTLSProCAG3.crt: CN=TrustAsia OV TLS Pro CA G3,O=TrustAsia Technologies, Inc.,C=CN

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt (DER format)
  • Serial number: 4525291303278125203493074625561566841
  • SHA-1 Fingerprint: 2faf509f4a4219c3ffb224a53dedd4294ea0b4d0
  • SHA-1 Fingerprint: 2f:af:50:9f:4a:42:19:c3:ff:b2:24:a5:3d:ed:d4:29:4e:a0:b4:d0
  • SHA-256 Fingerprint: d0e8a51acaab9af82767e2ef16543c2cc635551b5de0dae25d6aac71e7862870
  • SHA-256 Fingerprint: d0:e8:a5:1a:ca:ab:9a:f8:27:67:e2:ef:16:54:3c:2c:c6:35:55:1b:5d:e0:da:e2:5d:6a:ac:71:e7:86:28:70
  • Signature hash algorithm: sha256
  • Subject: CN=TrustAsia OV TLS Pro CA G3,O=TrustAsia Technologies, Inc.,C=CN
  • Not valid before: 2020-03-13 12:01:39
  • Not valid after: 2030-03-13 12:01:39
  • Issuer:
    • Issuer name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:67:8a:16:4d:62:7d:10:ee:7d:6e:02:0e:c7:1e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Mar 13 12:01:39 2020 GMT
            Not After : Mar 13 12:01:39 2030 GMT
        Subject: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia OV TLS Pro CA G3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d2:1d:af:e6:86:27:bc:46:53:e0:40:7d:37:ce:
                    50:7b:0e:d2:42:c7:05:70:e2:fd:9d:a8:94:d8:05:
                    eb:67:ce:94:91:a9:4c:b5:cc:91:ea:ae:f3:6c:0c:
                    a5:07:fc:9d:48:bc:3c:11:22:98:a4:ad:a1:c0:7b:
                    a6:3a:89:ee:dc:2f:78:b0:e8:d7:c8:7f:f1:2e:78:
                    ce:81:c2:b1:f6:6e:e6:7e:76:ba:4c:2d:c4:49:8c:
                    55:25:0b:65:f4:56:d2:95:4f:5d:f8:a3:46:c1:5f:
                    0b:cc:e2:bc:2f:c0:7c:d9:aa:76:04:e7:a2:37:ca:
                    be:59:a6:f4:8d:15:82:c3:79:3b:97:e5:f6:b6:4e:
                    73:23:b4:5b:bd:2b:6e:c8:ba:19:31:6c:31:90:d1:
                    0c:5b:ca:f8:4c:df:ae:01:4d:16:74:be:aa:b4:9e:
                    91:eb:02:26:b3:8f:a6:b3:ac:ab:95:c7:c7:5b:dc:
                    78:b2:78:83:38:30:0b:e3:a6:12:8c:26:bf:d4:16:
                    bf:4f:fe:31:62:64:43:24:49:7a:c1:5f:52:5c:5c:
                    ba:0b:26:30:3d:e9:97:4c:d1:cf:62:88:9e:b8:ca:
                    de:92:89:39:d8:d8:e9:c7:17:da:df:c8:5e:5d:cb:
                    e0:84:2e:73:95:7b:1c:ea:6e:6b:38:ac:dd:9a:5d:
                    4a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9A:D9:0D:10:C9:C4:5F:4C:32:D2:E7:F0:1B:AD:4A:A6:2D:25:3B:D4
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.cn

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua

    Signature Algorithm: sha256WithRSAEncryption
         3a:30:a5:2e:21:14:42:9e:3a:8e:3d:cf:e3:86:b0:79:54:37:
         2b:cc:74:5a:6e:9e:61:68:4b:e9:65:5f:92:47:63:3e:c1:0c:
         23:39:9f:ed:7f:b2:a1:11:85:db:04:1e:de:51:0a:4f:51:0d:
         c8:4d:18:35:09:d8:c6:4f:79:62:d9:50:b6:c6:c5:4b:11:26:
         c1:1a:46:b7:e2:7c:af:2e:b2:02:3d:0e:8c:9b:bb:cd:aa:2f:
         86:8d:1b:6e:67:50:93:dd:85:3b:36:96:89:2a:ed:f8:cb:bc:
         e4:02:d5:8a:95:e7:cb:2f:5c:37:9e:7d:20:f9:79:31:0b:6b:
         95:e4:f0:fb:51:af:d0:fe:47:18:83:18:e3:f3:79:25:c4:ab:
         6c:d1:80:aa:85:a5:49:d1:06:1b:b0:34:b5:e0:9e:3c:08:6a:
         11:ed:77:f5:27:06:d9:f5:ca:14:b4:1e:45:20:8e:b3:50:5b:
         af:1f:da:74:3e:88:07:ec:b8:00:94:e3:3e:f7:33:72:51:9a:
         3e:5a:62:14:27:4e:2b:65:b2:7f:84:7b:97:80:eb:5e:1c:43:
         58:b7:3a:ab:e8:f1:91:61:1b:80:15:d5:0f:39:94:ac:33:c4:
         ba:0e:0a:74:e1:52:9e:ec:e7:03:db:cd:50:1f:f3:5a:d8:0d:
         02:2f:43:56

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26