OneSignSSLRSAEVSecureServerCA.crt: CN=OneSignSSL RSA EV Secure Server CA,OU=Controlled by Sectigo exclusively for One Sign Pte. Ltd.,O=One Sign Pte. Ltd.,L=Singapore,ST=Singapore,C=SG

Page content

CA Certificate Basic Information

This certificate is intermediate certificate used for the issuance of other certificates.

  • Certificate download URL: http://onesign.crt.sectigo.com/OneSignSSLRSAEVSecureServerCA.crt (DER format)
  • Serial number: 165537321430424339793841704444845238348
  • SHA-1 Fingerprint: 3d5829da0c230a03f1779eaa2fb344bc47a787d1
  • SHA-1 Fingerprint: 3d:58:29:da:0c:23:0a:03:f1:77:9e:aa:2f:b3:44:bc:47:a7:87:d1
  • SHA-256 Fingerprint: 9b53f69d8447b01b01e4565b853e288b6cb82291da82a5b41bbc15c2f3ad6548
  • SHA-256 Fingerprint: 9b:53:f6:9d:84:47:b0:1b:01:e4:56:5b:85:3e:28:8b:6c:b8:22:91:da:82:a5:b4:1b:bc:15:c2:f3:ad:65:48
  • Signature hash algorithm: sha384
  • Subject: CN=OneSignSSL RSA EV Secure Server CA,OU=Controlled by Sectigo exclusively for One Sign Pte. Ltd.,O=One Sign Pte. Ltd.,L=Singapore,ST=Singapore,C=SG
  • Not valid before: 2019-06-10 00:00:00
  • Not valid after: 2029-06-09 23:59:59
  • Issuer:

Download certificate through curl:

curl -sSL http://onesign.crt.sectigo.com/OneSignSSLRSAEVSecureServerCA.crt --output cert.crt

Download certificate through wget:

wget -q http://onesign.crt.sectigo.com/OneSignSSLRSAEVSecureServerCA.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:89:54:13:b4:15:d7:3d:b7:84:05:27:93:82:28:4c
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
        Validity
            Not Before: Jun 10 00:00:00 2019 GMT
            Not After : Jun  9 23:59:59 2029 GMT
        Subject: C=SG, ST=Singapore, L=Singapore, O=One Sign Pte. Ltd., OU=Controlled by Sectigo exclusively for One Sign Pte. Ltd., CN=OneSignSSL RSA EV Secure Server CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:12:8d:94:42:e4:ab:4b:98:19:7a:39:94:38:
                    67:f4:38:e6:cf:79:f4:19:9f:f0:55:8a:26:7d:ce:
                    4f:cc:d9:37:03:61:65:ec:a4:e7:1d:02:4f:82:92:
                    65:dd:a3:a1:89:df:fd:1a:16:1d:30:ba:3d:3d:f8:
                    68:b8:52:28:2d:84:86:fb:c8:b4:76:20:1d:c8:be:
                    58:8c:ab:83:f7:ef:96:41:61:09:bd:53:8f:6d:11:
                    a3:ef:4f:24:15:b5:9f:cb:6f:a7:7e:25:50:d8:6f:
                    f9:b3:17:0c:86:53:ee:5d:98:9c:2c:d1:c2:a5:89:
                    f7:bc:37:f3:03:1c:50:64:0b:54:2e:79:51:1a:e8:
                    87:94:3e:e8:a1:5e:b6:64:78:bc:e1:8b:32:f7:c6:
                    eb:ab:76:bf:ac:5e:c7:00:c6:2a:f2:e1:83:b1:e8:
                    34:fb:53:bf:b3:19:a8:9e:5b:0e:b4:7f:50:94:0e:
                    ed:ea:3f:57:17:4e:ae:1e:89:99:52:e7:cb:a1:8c:
                    4c:9c:46:30:f3:7f:3c:79:fc:32:66:08:6b:ec:a6:
                    84:c2:50:ac:40:c2:e6:62:11:f4:27:e0:d0:17:6d:
                    6f:5d:d9:4f:8d:ef:ef:5c:38:19:0d:49:fe:c4:2a:
                    b1:bf:8c:05:5f:43:10:ec:6b:ff:7e:73:0f:be:96:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB

            X509v3 Subject Key Identifier: 
                6C:2D:83:61:EC:30:74:60:0B:59:78:4B:32:D8:44:0C:26:56:39:B8
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://sectigo.com/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha384WithRSAEncryption
         5f:59:61:04:43:c4:7e:01:92:8a:08:da:c5:fe:9f:64:19:7f:
         e9:04:45:36:e1:05:31:c8:a1:f1:ea:3a:c9:2b:8c:9a:54:01:
         75:43:4d:6e:ab:7f:d0:62:97:d5:f3:ac:ae:72:aa:b8:75:0f:
         bd:fb:f8:91:23:9c:82:a2:0b:5c:b8:4b:68:ae:c8:53:70:2f:
         5a:61:ae:e3:c1:ac:56:5a:36:73:77:0a:d2:fb:cc:f1:85:82:
         34:e6:4d:00:88:04:83:16:55:cf:f9:12:5a:17:7b:57:ee:cf:
         9d:ee:01:23:9e:68:b9:9d:02:fb:d9:86:cd:98:c6:7d:82:81:
         55:0d:34:d4:11:db:8c:e6:d9:8a:12:3c:76:2e:23:67:79:42:
         86:c7:c6:e4:90:99:d5:78:d8:84:af:ef:80:cd:26:40:a0:2c:
         01:bf:f2:74:3b:b3:40:a1:0a:66:8d:14:21:1d:68:d1:b7:17:
         33:d7:30:1f:e8:34:2c:2a:be:b9:85:fb:0b:a6:e0:c4:88:f2:
         a6:fd:4a:46:4e:ef:37:56:6a:99:62:30:6b:fe:da:fa:78:d5:
         28:49:a9:f2:05:01:50:4d:b4:12:a4:cb:ff:5a:83:6d:79:9e:
         64:e6:8b:ca:53:07:24:54:04:28:5d:c0:ba:f2:d6:7f:19:00:
         e9:96:ee:e2:44:ad:cc:f0:1c:e6:ec:4f:92:0a:9d:ee:a9:fd:
         90:fa:ec:3a:12:c4:9f:91:58:cb:c5:98:79:3d:02:55:9d:42:
         7e:31:b3:d7:03:d6:9d:83:dc:42:a0:48:84:c0:cb:ef:97:ff:
         4c:71:36:49:f3:65:e5:6f:7d:b4:99:0a:69:35:5c:51:a2:eb:
         b7:a4:f0:79:a4:c2:1b:f7:1d:d6:f9:6d:86:c5:4b:7a:de:9a:
         1a:25:14:f8:27:3a:3d:32:1c:2d:03:c0:9c:69:f9:33:a6:9f:
         62:c9:5c:fb:7e:f1:c6:49:30:3e:fe:8d:1e:96:4b:3f:0f:18:
         70:d1:3d:62:5e:c1:77:3f:7c:8c:20:98:3e:75:43:99:db:ef:
         5e:b4:46:ca:c6:2a:4c:ad:f3:36:bd:11:6c:20:7d:c3:a0:d2:
         0b:f4:0a:03:b2:05:4a:8d:b4:d6:a7:15:9b:79:01:f3:fa:ad:
         f5:a6:c1:76:0d:fb:c9:f5:ce:eb:c8:f6:0b:8e:3b:eb:7f:f9:
         98:a2:10:dc:88:9b:d9:6f:0f:86:74:a8:66:0e:8e:89:aa:d4:
         83:1c:85:a9:fe:e4:f7:73:44:35:e1:34:c2:03:94:1b:c3:63:
         f7:87:f4:e1:f5:35:ca:03:f6:51:6b:9d:ac:00:99:a0:9c:57:
         de:e9:cd:1b:a9:78:ec:be

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIGYzCCBEugAwIBAgIQfIlUE7QV1z23hAUnk4IoTDANBgkqhkiG9w0BAQwFADCB
iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl
cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNV
BAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTkw
NjEwMDAwMDAwWhcNMjkwNjA5MjM1OTU5WjCBwjELMAkGA1UEBhMCU0cxEjAQBgNV
BAgTCVNpbmdhcG9yZTESMBAGA1UEBxMJU2luZ2Fwb3JlMRswGQYDVQQKExJPbmUg
U2lnbiBQdGUuIEx0ZC4xQTA/BgNVBAsTOENvbnRyb2xsZWQgYnkgU2VjdGlnbyBl
eGNsdXNpdmVseSBmb3IgT25lIFNpZ24gUHRlLiBMdGQuMSswKQYDVQQDEyJPbmVT
aWduU1NMIFJTQSBFViBTZWN1cmUgU2VydmVyIENBMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAvhKNlELkq0uYGXo5lDhn9Djmz3n0GZ/wVYomfc5PzNk3
A2Fl7KTnHQJPgpJl3aOhid/9GhYdMLo9PfhouFIoLYSG+8i0diAdyL5YjKuD9++W
QWEJvVOPbRGj708kFbWfy2+nfiVQ2G/5sxcMhlPuXZicLNHCpYn3vDfzAxxQZAtU
LnlRGuiHlD7ooV62ZHi84Ysy98brq3a/rF7HAMYq8uGDseg0+1O/sxmonlsOtH9Q
lA7t6j9XF06uHomZUufLoYxMnEYw8388efwyZghr7KaEwlCsQMLmYhH0J+DQF21v
XdlPje/vXDgZDUn+xCqxv4wFX0MQ7Gv/fnMPvpbvFwIDAQABo4IBizCCAYcwHwYD
VR0jBBgwFoAUU3m/WqorSs9UgOHYm8Cd8rIDZsswHQYDVR0OBBYEFGwtg2HsMHRg
C1l4SzLYRAwmVjm4MA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEA
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA4BgNVHSAEMTAvMC0GBFUd
IAAwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwUAYDVR0f
BEkwRzBFoEOgQYY/aHR0cDovL2NybC51c2VydHJ1c3QuY29tL1VTRVJUcnVzdFJT
QUNlcnRpZmljYXRpb25BdXRob3JpdHkuY3JsMHYGCCsGAQUFBwEBBGowaDA/Bggr
BgEFBQcwAoYzaHR0cDovL2NydC51c2VydHJ1c3QuY29tL1VTRVJUcnVzdFJTQUFk
ZFRydXN0Q0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3Qu
Y29tMA0GCSqGSIb3DQEBDAUAA4ICAQBfWWEEQ8R+AZKKCNrF/p9kGX/pBEU24QUx
yKHx6jrJK4yaVAF1Q01uq3/QYpfV86yucqq4dQ+9+/iRI5yCogtcuEtorshTcC9a
Ya7jwaxWWjZzdwrS+8zxhYI05k0AiASDFlXP+RJaF3tX7s+d7gEjnmi5nQL72YbN
mMZ9goFVDTTUEduM5tmKEjx2LiNneUKGx8bkkJnVeNiEr++AzSZAoCwBv/J0O7NA
oQpmjRQhHWjRtxcz1zAf6DQsKr65hfsLpuDEiPKm/UpGTu83VmqZYjBr/tr6eNUo
SanyBQFQTbQSpMv/WoNteZ5k5ovKUwckVAQoXcC68tZ/GQDplu7iRK3M8Bzm7E+S
Cp3uqf2Q+uw6EsSfkVjLxZh5PQJVnUJ+MbPXA9adg9xCoEiEwMvvl/9McTZJ82Xl
b320mQppNVxRouu3pPB5pMIb9x3W+W2GxUt63poaJRT4Jzo9MhwtA8Ccafkzpp9i
yVz7fvHGSTA+/o0elks/Dxhw0T1iXsF3P3yMIJg+dUOZ2+9etEbKxipMrfM2vRFs
IH3DoNIL9AoDsgVKjbTWpxWbeQHz+q31psF2DfvJ9c7ryPYLjjvrf/mYohDciJvZ
bw+GdKhmDo6JqtSDHIWp/uT3c0Q14TTCA5Qbw2P3h/Th9TXKA/ZRa52sAJmgnFfe
6c0bqXjsvg==
-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26