tp_gtsca1d3.der: CN=GTS CA 1D3,O=Google Trust Services,C=US (Intermediate Certificate, Expiring 2024-01-14) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/tp_gtsca1d3.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/tp_gtsca1d3.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:79:0e:c9:a7:c8:ff:63:93:03:d6:9b:04:63:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Equifax, OU=Equifax Secure Certificate Authority
        Validity
            Not Before: Jan 15 00:00:00 2021 GMT
            Not After : Jan 14 23:59:59 2024 GMT
        Subject: C=US, O=Google Trust Services, CN=GTS CA 1D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:f8:fb:e8:03:be:5a:50:60:66:85:8b:d2:
                    66:a2:63:8f:7e:a0:2c:0d:52:41:08:b3:10:6b:c3:
                    b1:da:f0:4f:b1:d7:7b:66:ac:ea:89:52:6a:b9:34:
                    67:49:63:67:38:90:52:bb:37:fe:44:36:6e:11:9c:
                    fd:79:2e:64:67:5f:43:73:0a:d1:53:f6:88:28:48:
                    4f:05:c9:ee:8b:b6:7f:fc:96:69:1c:11:7a:6a:2f:
                    3d:09:7a:42:85:a9:d9:5d:b5:fa:23:dc:a5:56:89:
                    8f:23:df:ae:b9:36:fa:dd:15:00:cb:af:be:d4:8f:
                    c5:75:4f:c6:fd:84:d5:35:b2:47:b0:75:f2:05:21:
                    e6:ec:2e:77:ec:43:d7:a3:00:07:e7:34:19:f2:dd:
                    7c:22:82:ee:3d:50:6b:42:90:d5:2a:f0:55:31:d4:
                    fd:59:cd:b5:7e:f3:ef:ae:41:18:f8:89:7f:e9:9f:
                    0d:5c:bf:e4:52:60:0c:c6:c4:ac:ba:5a:54:07:01:
                    14:29:ef:b5:85:a4:6d:18:cb:0c:e8:36:61:37:74:
                    e9:86:bf:80:c1:38:a8:2e:74:af:68:d0:f2:aa:8f:
                    b3:7e:92:5e:5e:ca:22:c0:52:c7:f9:8e:98:b0:fe:
                    91:e4:88:d5:07:35:28:8a:61:60:79:67:93:49:b6:
                    0f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                50:6D:C2:55:51:E5:40:88:1B:09:03:F6:47:FC:00:81:C1:06:43:CF
            X509v3 Authority Key Identifier: 
                keyid:48:E6:68:F9:2B:D2:B2:95:D7:47:D8:23:20:10:4F:33:98:90:9F:D4

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.geotrust.com/crls/secureca.crl

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:07:7c:3a:5b:09:62:d2:58:9b:c1:ce:d9:af:11:cf:c1:
         e5:8f:d5:0a:df:e7:32:43:7a:51:64:f3:8d:36:52:49:3f:2d:
         e2:39:c7:83:e4:4d:98:ef:10:d7:8f:70:a1:0b:94:e7:71:bc:
         a9:ec:c8:86:62:b0:6e:be:93:e6:de:c8:da:3c:d2:7f:c0:16:
         42:94:b0:0d:93:8c:52:1c:aa:7e:fa:af:8a:ab:64:ab:e3:29:
         c6:ee:6f:71:89:e3:62:8f:f3:6d:d3:7b:f5:2e:88:f7:fa:07:
         98:a9:76:fc:eb:0f:32:c4:7a:ad:89:ef:58:2a:df:98:71:41:
         6b:f2

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06