ovoca.cer: CN=CFCA OV OCA,O=China Financial Certification Authority,C=CN (Intermediate Certificate, Expiring 2029-12-25) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://gtc.cfca.com.cn/ovoca/ovoca.cer" --output cert.crt

Download certificate through wget:

wget -q "http://gtc.cfca.com.cn/ovoca/ovoca.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f9:df:6a:df:f5:64:be:a6:8b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CN, O=China Financial Certification Authority, CN=CFCA EV ROOT
        Validity
            Not Before: Mar 25 02:02:56 2015 GMT
            Not After : Dec 25 02:02:56 2029 GMT
        Subject: C=CN, O=China Financial Certification Authority, CN=CFCA OV OCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d7:8c:53:cb:46:c7:ce:46:9e:c8:00:9e:ab:
                    aa:f2:7f:1c:46:e7:36:53:d5:f0:8b:e2:59:b0:ee:
                    c9:3a:49:59:8e:28:d7:c4:eb:41:9f:ed:6e:a8:ae:
                    4b:2b:15:52:1b:20:c2:be:56:b6:29:f9:a6:32:85:
                    27:2a:f0:42:53:f7:15:c1:81:72:b6:1e:ab:69:68:
                    31:8e:79:c9:6c:a4:9b:dc:b3:ea:d7:9f:db:65:4f:
                    bf:3d:34:1a:77:8b:95:3e:9c:b1:3d:33:56:d1:08:
                    74:b1:dc:7c:ee:f2:9e:c0:7a:a9:65:a2:ef:bc:9d:
                    9d:9e:81:a5:5b:58:52:f5:cc:2d:49:10:db:a9:49:
                    22:3d:62:36:de:7e:16:f4:eb:2f:d3:57:14:34:c7:
                    86:6d:cf:03:f0:2d:c7:7c:35:4b:52:ae:e9:5d:a2:
                    5c:4f:6e:14:1e:09:93:49:30:fa:b5:18:a3:31:85:
                    de:69:0f:06:38:98:22:b1:0d:ea:da:aa:14:cd:5e:
                    e8:bd:01:e7:f7:ab:28:b6:21:cf:44:5e:67:4d:3c:
                    04:64:64:95:36:5d:32:7d:14:9f:83:13:e0:a1:68:
                    8b:df:27:f5:70:41:f3:34:78:69:41:9f:f4:80:69:
                    ab:f9:e2:30:66:46:77:9c:3d:e0:fa:61:fa:6e:88:
                    9f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.cfca.com.cn/ocsp

            X509v3 Authority Key Identifier: 
                keyid:E3:FE:2D:FD:28:D0:0B:B5:BA:B6:A2:C4:BF:06:AA:05:8C:93:FB:2F

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.cfca.com.cn/us/us-12.htm

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.cfca.com.cn/evrca/RSA/crl1.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                66:B3:EF:FB:54:95:87:E9:AC:A5:96:56:AE:E6:7D:ED:3A:D0:43:D1
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, E-mail Protection, TLS Web Server Authentication
    Signature Algorithm: sha256WithRSAEncryption
         ca:11:1f:2a:70:19:99:18:e1:bc:18:e2:7a:ef:45:56:39:28:
         37:52:8b:ce:a1:ce:ff:c7:3d:a6:13:e7:a7:c8:47:12:c2:7f:
         f4:42:b2:fc:0b:90:d2:03:a9:cc:bc:13:2b:09:61:32:b5:83:
         e8:7c:64:14:5d:3c:2d:96:ee:fc:18:bc:58:36:7d:c0:fd:1b:
         73:73:32:7e:fc:15:c8:86:87:b7:68:e4:f8:b5:0f:b6:b3:db:
         eb:15:17:c8:5e:ce:02:92:6a:87:85:f6:12:bc:0a:e8:91:d6:
         b2:62:60:5d:ef:ca:6c:23:04:b9:2c:25:33:18:a4:a7:ef:2f:
         14:98:08:28:c6:2c:bb:46:da:d5:b7:97:35:c2:f2:72:7a:e6:
         24:d5:9d:65:f0:c3:75:b3:33:eb:98:06:f8:1d:2f:c3:aa:70:
         7e:d2:a7:61:14:6b:df:3b:2b:fb:96:0e:bf:c2:52:00:90:df:
         38:70:79:4a:34:2d:c9:bf:21:47:68:22:00:ca:14:cf:82:35:
         1a:c9:4b:c1:28:52:bb:5f:03:7d:ba:d2:17:97:62:f7:21:95:
         fb:cd:fc:46:4b:f2:7d:f9:97:8d:c3:26:e5:40:a9:9d:fc:c2:
         b2:74:9b:bd:02:4e:be:64:c2:cb:82:39:42:16:48:a1:24:89:
         fd:52:bf:0c:d8:a4:22:83:3e:d8:3c:35:48:26:33:ad:4b:b9:
         63:39:05:46:87:cf:0b:3d:49:d0:d5:f0:58:ed:1c:1a:81:f8:
         9c:4b:fc:5c:94:83:a7:69:78:68:c9:6c:e0:ec:47:10:fd:3d:
         7f:3b:81:64:a4:ca:8a:b8:ea:de:68:8e:4d:13:18:c0:4f:c7:
         0a:8b:3c:98:db:07:0e:39:72:88:62:b8:b7:13:09:db:9b:ed:
         34:21:a6:18:6a:24:11:19:44:7a:a7:31:45:2b:17:45:31:b4:
         ad:0a:d2:38:39:b3:7e:03:db:41:ed:c9:c1:09:6e:2f:cf:7b:
         00:25:df:ce:82:62:c5:df:c5:d3:6b:ef:e4:9b:77:35:9d:03:
         9f:84:21:ac:ea:4c:76:85:e3:7f:0e:01:40:73:e3:fb:95:d3:
         9b:a3:f9:20:19:0b:51:ea:da:f4:da:0c:97:08:55:a7:2c:cb:
         53:d3:e0:a8:34:e6:34:a3:74:fe:2d:b1:2a:61:e2:8b:5b:ba:
         76:f4:6f:6c:80:78:28:a8:b1:62:6d:63:4c:48:a1:b5:42:f7:
         af:92:18:d4:30:e0:ff:83:8f:1f:fe:73:12:62:c6:d4:fb:ec:
         84:68:bb:e3:bd:11:db:6f:93:8d:20:f9:1c:13:6f:13:46:14:
         10:2a:60:ca:23:e0:d1:22

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06