GeoTrustECCCNCAG2.crt: CN=GeoTrust ECC CN CA G2,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.digicert.cn/GeoTrustECCCNCAG2.crt (DER format)
  • Serial number: 13689760405096422298350605284056346551
  • SHA-1 Fingerprint: 3d1c554b1cd5e930a4a8c9928ad5519146f9d6a8
  • SHA-1 Fingerprint: 3d:1c:55:4b:1c:d5:e9:30:a4:a8:c9:92:8a:d5:51:91:46:f9:d6:a8
  • SHA-256 Fingerprint: 7caeec680e6497fc5109073f83816e798f27f8968a2663c1c95711b548192e35
  • SHA-256 Fingerprint: 7c:ae:ec:68:0e:64:97:fc:51:09:07:3f:83:81:6e:79:8f:27:f8:96:8a:26:63:c1:c9:57:11:b5:48:19:2e:35
  • Signature hash algorithm: sha256
  • Subject: CN=GeoTrust ECC CN CA G2,O=DigiCert Inc,C=US
  • Not valid before: 2020-03-04 12:04:45
  • Not valid after: 2030-03-04 12:04:45
  • Issuer:
    • Issuer name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.digicert.cn/GeoTrustECCCNCAG2.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.digicert.cn/GeoTrustECCCNCAG2.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4c:8d:4c:91:17:d7:c7:1f:ad:dd:93:32:b5:af:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Mar  4 12:04:45 2020 GMT
            Not After : Mar  4 12:04:45 2030 GMT
        Subject: C=US, O=DigiCert Inc, CN=GeoTrust ECC CN CA G2
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:9f:85:01:59:72:48:37:1d:a1:91:e2:2c:aa:2b:
                    0e:f7:1c:59:ac:71:37:c9:51:1f:cf:f6:f1:54:d9:
                    6a:e0:9c:60:22:aa:83:7b:0f:06:56:49:cf:95:7f:
                    7f:fd:ed:8f:dc:30:7f:8f:37:f7:bb:1d:6b:55:07:
                    0c:10:c7:ad:c9
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FA:F0:22:1E:C1:3E:98:18:61:87:DB:67:FD:CE:46:A3:42:72:82:08
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.cn

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.16.840.1.114412.1.2
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2

    Signature Algorithm: sha256WithRSAEncryption
         75:b6:1b:f9:6a:8b:60:93:ad:eb:83:aa:4a:d8:54:f9:f7:6e:
         fb:2b:0f:66:a9:37:14:ca:70:c9:4c:10:c3:01:ec:e3:cf:59:
         eb:1c:d3:94:cc:eb:0c:7e:94:f1:14:1a:89:3a:39:b7:e1:36:
         dd:8a:9f:7b:9a:4a:a8:b6:4f:fc:b0:a6:ab:2f:e3:85:4e:d7:
         03:6c:cc:bc:b8:83:27:a8:f0:c1:e7:ad:69:48:99:16:f9:d7:
         05:93:48:34:53:49:56:bd:94:96:30:f2:7d:73:e0:f9:8e:73:
         51:40:f9:eb:1f:4b:76:12:19:c7:cd:44:fe:d5:9e:82:53:57:
         c9:ac:59:a7:1b:7c:ea:44:e5:04:b6:a8:a8:ed:47:08:92:b9:
         a4:92:a7:ab:e0:f1:c0:71:0c:5a:8e:cb:0d:f4:3b:93:0f:bc:
         6b:03:35:2e:e1:36:a1:20:e6:80:62:23:0e:71:43:4b:bb:21:
         bb:2b:b9:c4:5e:88:69:6d:aa:ae:9c:80:71:91:f1:19:aa:41:
         36:e3:de:6f:15:c7:ec:58:d9:e5:94:88:26:b2:c1:80:ee:a1:
         64:85:51:29:6c:27:33:ec:a1:f3:6c:33:bb:d7:f8:fe:37:3d:
         72:c5:5d:15:bb:bd:84:dd:36:52:e0:98:83:a3:5c:f1:98:19:
         5a:fc:c7:dd

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIDyTCCArGgAwIBAgIQCkyNTJEX18cfrd2TMrWvtzANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
QTAeFw0yMDAzMDQxMjA0NDVaFw0zMDAzMDQxMjA0NDVaMEQxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxHjAcBgNVBAMTFUdlb1RydXN0IEVDQyBD
TiBDQSBHMjBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJ+FAVlySDcdoZHiLKor
DvccWaxxN8lRH8/28VTZauCcYCKqg3sPBlZJz5V/f/3tj9wwf48397sda1UHDBDH
rcmjggFjMIIBXzAdBgNVHQ4EFgQU+vAiHsE+mBhhh9tn/c5Go0JygggwHwYDVR0j
BBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDgYDVR0PAQH/BAQDAgGGMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMDMG
CCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZGlnaWNlcnQu
Y24wQAYDVR0fBDkwNzA1oDOgMYYvaHR0cDovL2NybC5kaWdpY2VydC5jbi9EaWdp
Q2VydEdsb2JhbFJvb3RDQS5jcmwwYwYDVR0gBFwwWjA3BglghkgBhv1sAQEwKjAo
BggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzALBglghkgB
hv1sAQIwCAYGZ4EMAQIBMAgGBmeBDAECAjANBgkqhkiG9w0BAQsFAAOCAQEAdbYb
+WqLYJOt64OqSthU+fdu+ysPZqk3FMpwyUwQwwHs489Z6xzTlMzrDH6U8RQaiTo5
t+E23Yqfe5pKqLZP/LCmqy/jhU7XA2zMvLiDJ6jwweetaUiZFvnXBZNINFNJVr2U
ljDyfXPg+Y5zUUD56x9LdhIZx81E/tWeglNXyaxZpxt86kTlBLaoqO1HCJK5pJKn
q+DxwHEMWo7LDfQ7kw+8awM1LuE2oSDmgGIjDnFDS7shuyu5xF6IaW2qrpyAcZHx
GapBNuPebxXH7FjZ5ZSIJrLBgO6hZIVRKWwnM+yh82wzu9f4/jc9csVdFbu9hN02
UuCYg6Nc8ZgZWvzH3Q==
-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26