entrust_l1r.cer: CN=Entrust Certification Authority - L1R,OU=(c) 2014 Entrust, Inc. - for authorized use only,OU=See www.entrust.net/legal-terms,O=Entrust, Inc.,C=US (Intermediate Certificate, Expiring 2024-11-18) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://web.entrust.com/root-certificates/entrust_l1r.cer" --output cert.crt

Download certificate through wget:

wget -q "https://web.entrust.com/root-certificates/entrust_l1r.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cb:c8:b9:a3:00:00:00:00:51:d3:50:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G3
        Validity
            Not Before: Nov 18 20:33:37 2014 GMT
            Not After : Nov 18 21:03:37 2024 GMT
        Subject: C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2014 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1R
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e2:f6:8f:9e:df:0c:e4:46:ff:ac:65:68:29:
                    2f:0c:e1:12:e9:4e:b0:b7:00:bc:21:65:f8:9b:e7:
                    b8:f8:e9:84:0f:eb:54:91:45:ca:9f:ca:6e:3f:d3:
                    04:45:6f:45:6d:cd:a9:b7:d4:1e:6a:9a:98:5d:50:
                    e3:a8:48:74:e8:2e:2f:05:09:b9:ca:e5:8d:79:c5:
                    24:98:bd:07:54:c0:e4:1e:eb:76:37:c9:8c:49:14:
                    96:c8:f2:26:9c:8b:c6:55:8a:8a:2e:79:c0:65:58:
                    54:88:d0:da:3f:d8:59:1e:eb:20:af:d8:1b:c8:9c:
                    c5:c1:29:18:12:f9:f4:aa:a0:af:65:72:8c:e0:65:
                    82:2a:9a:22:4a:08:40:36:97:b3:b3:1d:0d:a3:0c:
                    7d:4b:26:b9:24:55:59:aa:a5:7e:f3:b3:2e:27:72:
                    a4:4b:c5:78:2e:de:34:ac:f3:79:2f:27:c6:da:a1:
                    e6:12:25:9f:64:d0:08:75:8d:1e:c1:e0:f6:dd:29:
                    27:77:a9:fd:13:c2:a4:6c:84:32:cf:67:73:a6:74:
                    eb:c0:d7:02:1d:b0:68:09:4c:82:7c:2a:a2:e2:2f:
                    43:d9:37:62:fe:c1:c7:a6:75:94:f1:bb:6d:f6:e9:
                    87:ab:a9:c5:b7:b1:65:bf:6a:97:46:1d:04:97:b2:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.entrust.net

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.entrust.net/g3ca.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114028.10.1.9.1
                  CPS: http://www.entrust.net/rpa

            X509v3 Subject Key Identifier: 
                D4:36:FF:0E:3C:50:FD:50:71:CA:1C:71:C1:8F:F7:BE:A7:EF:85:34
            X509v3 Authority Key Identifier: 
                keyid:B5:75:01:EE:41:C7:CA:7A:3F:F2:FC:5A:56:C7:76:06:0B:06:6C:66

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:ec:ff:5c:6c:ef:cc:4b:6b:07:16:0d:55:fd:5d:e8:f7:
         a9:32:77:34:8c:4b:a0:3c:51:24:6e:e3:51:16:55:27:d3:7d:
         d3:7d:4f:10:12:b8:4b:fc:ed:22:d0:2b:3b:b5:ab:8c:8e:6b:
         01:82:f2:09:01:42:d8:cd:47:3b:66:37:cd:76:9b:30:60:86:
         bb:7a:d1:80:b2:50:fa:e2:9f:d3:7b:a4:ff:85:2d:da:04:22:
         2c:1c:b7:8d:74:b6:18:88:ab:bd:e6:0b:05:2f:e5:db:90:e9:
         9c:d9:26:4b:a0:04:7d:7a:d5:49:78:2e:e4:dc:c2:50:d9:aa:
         75:d8:cf:f4:df:fc:f5:0f:fa:3a:2c:b8:aa:d4:15:1e:ad:58:
         bd:d3:1d:eb:93:d6:87:01:c4:63:e6:05:aa:29:1f:a7:9e:e4:
         bc:f2:42:00:21:41:93:c7:ad:85:d5:35:e0:33:93:ef:4d:19:
         50:82:0f:54:ad:93:ae:9b:1f:7f:24:db:a9:64:25:3e:55:33:
         31:d4:f3:c1:b8:ca:a4:37:70:8c:4b:e9:82:6a:19:23:6d:a7:
         21:83:b1:67:8f:93:66:34:cf:90:5b:74:41:35:2e:26:16:00:
         75:3a:b4:53:0a:40:38:9d:29:18:78:6b:72:3b:e6:88:4a:69:
         d5:ed:2d:8f

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06