TrustProviderBVTLSRSACAG1.crt: CN=Trust Provider B.V. TLS RSA CA G1,OU=Domain Validated SSL,O=Trust Provider B.V.,C=NL (Intermediate Certificate, Expiring 2027-11-02) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt" --output cert.crt

Download certificate through wget:

wget -q "http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c4:11:ed:f0:02:f7:30:36:c4:e5:d4:2f:3e:34:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
        Validity
            Not Before: Nov  2 12:25:10 2017 GMT
            Not After : Nov  2 12:25:10 2027 GMT
        Subject: C=NL, O=Trust Provider B.V., OU=Domain Validated SSL, CN=Trust Provider B.V. TLS RSA CA G1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:a3:54:73:fd:b8:a0:70:5b:03:46:58:d5:
                    27:ae:97:1f:4e:fb:9d:99:81:17:5f:7c:c8:ea:bf:
                    af:a0:e4:0f:be:ea:5d:4f:c8:b0:c9:87:43:59:5b:
                    6a:39:a1:8f:79:41:76:93:18:8d:cd:e2:b5:6f:14:
                    c7:bd:b5:ab:d5:59:21:1c:60:05:db:41:f8:cf:c1:
                    bf:48:61:54:f6:3e:ce:68:82:e7:3c:26:94:6a:ca:
                    18:a6:1a:e8:e8:95:0c:9e:dd:83:a9:52:61:40:c7:
                    99:0f:2d:61:fb:77:d7:e5:0b:39:a3:1b:95:bb:08:
                    1c:59:c8:8c:db:5b:0a:96:90:37:df:94:33:22:1e:
                    88:af:91:29:26:cb:a5:02:16:bf:d0:c4:d9:ca:8a:
                    42:bd:08:01:30:69:0d:41:e9:4d:94:5a:7f:e7:c1:
                    f4:8e:de:11:7d:16:7a:01:dd:fb:3d:d3:6c:66:f9:
                    e1:c9:f7:e5:ae:1a:49:89:9a:a7:90:9a:55:8a:58:
                    2e:15:d6:b6:1e:f4:7d:7e:08:6c:56:d1:22:ff:b6:
                    9e:4f:2a:49:6f:91:30:4b:86:65:55:b0:88:d7:28:
                    93:e4:44:b7:9c:c1:5c:39:99:b7:35:99:05:fb:5a:
                    d6:3b:1a:4a:d7:07:89:ef:ef:62:9d:29:7a:f9:07:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F5:56:22:1F:D9:BF:6B:59:24:52:B0:E1:6A:CD:C0:E1:57:67:E9:E8
            X509v3 Authority Key Identifier: 
                keyid:4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.2
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.2.1

    Signature Algorithm: sha256WithRSAEncryption
         a4:dc:08:9b:f4:7e:e7:85:54:fa:c2:29:1b:5b:a2:0a:c1:2a:
         e3:d7:8f:5f:98:d8:30:f4:7a:45:da:81:fb:0e:36:39:5c:bf:
         0b:b7:68:2d:22:64:da:9f:dd:5f:c5:59:26:2c:ce:a9:63:3a:
         46:b8:01:3f:e0:c5:94:14:0a:d1:f5:fa:86:cc:d4:e8:d4:3f:
         e0:97:99:39:c0:26:cb:16:cc:3b:bd:30:c3:33:7a:b0:88:0b:
         c1:49:bf:b4:86:52:32:5b:9a:c3:46:9d:af:46:39:79:92:9b:
         83:f6:b0:fd:7b:11:ce:92:11:2b:a4:fe:33:b5:68:1e:45:a0:
         ab:63:8a:18:1b:9b:ab:8f:a3:6e:42:53:2d:1e:7e:9e:57:c8:
         11:e1:dd:bd:9a:62:ab:8c:22:d5:fd:73:02:20:cb:6e:e4:83:
         6b:57:33:a8:a3:43:f5:b0:1f:d6:c2:d7:a0:dc:78:10:5d:3b:
         48:db:5e:fb:00:d3:be:d7:cd:0f:18:07:86:ee:0a:48:c2:3b:
         7f:9a:19:75:f2:2c:85:ed:a6:0b:3f:da:d4:06:0f:94:10:9d:
         2c:e7:95:6b:4c:f2:94:0d:8c:ae:00:a5:f2:38:3c:20:9a:db:
         98:89:93:03:ad:03:dc:c0:67:d1:3b:51:83:82:12:13:dd:d2:
         36:d6:27:22

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIQDsQR7fAC9zA2xOXULz408jANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0xNzExMDIxMjI1MTBaFw0yNzExMDIxMjI1MTBaMHYxCzAJBgNVBAYTAk5M
MRwwGgYDVQQKExNUcnVzdCBQcm92aWRlciBCLlYuMR0wGwYDVQQLExREb21haW4g
VmFsaWRhdGVkIFNTTDEqMCgGA1UEAxMhVHJ1c3QgUHJvdmlkZXIgQi5WLiBUTFMg
UlNBIENBIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CujVHP9
uKBwWwNGWNUnrpcfTvudmYEXX3zI6r+voOQPvupdT8iwyYdDWVtqOaGPeUF2kxiN
zeK1bxTHvbWr1VkhHGAF20H4z8G/SGFU9j7OaILnPCaUasoYphro6JUMnt2DqVJh
QMeZDy1h+3fX5Qs5oxuVuwgcWciM21sKlpA335QzIh6Ir5EpJsulAha/0MTZyopC
vQgBMGkNQelNlFp/58H0jt4RfRZ6Ad37PdNsZvnhyfflrhpJiZqnkJpVilguFda2
HvR9fghsVtEi/7aeTypJb5EwS4ZlVbCI1yiT5ES3nMFcOZm3NZkF+1rWOxpK1weJ
7+9inSl6+QcchQIDAQABo4IBTzCCAUswHQYDVR0OBBYEFPVWIh/Zv2tZJFKw4WrN
wOFXZ+noMB8GA1UdIwQYMBaAFE4iVCAYlebjbuYP+vq5Eu0GF485MA4GA1UdDwEB
/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/
BAgwBgEB/wIBADA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v
Y3NwLmRpZ2ljZXJ0LmNvbTBCBgNVHR8EOzA5MDegNaAzhjFodHRwOi8vY3JsMy5k
aWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290RzIuY3JsMEwGA1UdIARFMEMw
NwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0
LmNvbS9DUFMwCAYGZ4EMAQIBMA0GCSqGSIb3DQEBCwUAA4IBAQCk3Aib9H7nhVT6
wikbW6IKwSrj149fmNgw9HpF2oH7DjY5XL8Lt2gtImTan91fxVkmLM6pYzpGuAE/
4MWUFArR9fqGzNTo1D/gl5k5wCbLFsw7vTDDM3qwiAvBSb+0hlIyW5rDRp2vRjl5
kpuD9rD9exHOkhErpP4ztWgeRaCrY4oYG5urj6NuQlMtHn6eV8gR4d29mmKrjCLV
/XMCIMtu5INrVzOoo0P1sB/Wwteg3HgQXTtI2177ANO+180PGAeG7gpIwjt/mhl1
8iyF7aYLP9rUBg+UEJ0s55VrTPKUDYyuAKXyODwgmtuYiZMDrQPcwGfRO1GDghIT
3dI21ici
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06