alibabacloudgccr3tlsovca2021.crt: CN=Alibaba Cloud GCC R3 TLS OV CA 2021,O=Alibaba Cloud Computing Co., Ltd.,C=CN (Intermediate Certificate, Expiring 2024-06-16) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://secure.globalsign.com/cacert/alibabacloudgccr3tlsovca2021.crt" --output cert.crt

Download certificate through wget:

wget -q "http://secure.globalsign.com/cacert/alibabacloudgccr3tlsovca2021.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:29:84:ec:6f:5c:da:07:fc:b7:24:4a:f6:29:c4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
        Validity
            Not Before: Jun 16 12:00:00 2021 GMT
            Not After : Jun 16 00:00:00 2024 GMT
        Subject: C=CN, O=Alibaba Cloud Computing Co., Ltd., CN=Alibaba Cloud GCC R3 TLS OV CA 2021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:b8:4f:d5:d5:e3:fa:de:4f:87:4c:57:d3:
                    82:8d:6d:11:1c:e9:91:14:84:1f:df:a2:61:91:e5:
                    d8:27:3b:d8:f3:20:32:f0:33:cc:98:f3:af:56:d3:
                    8b:f3:04:c7:cf:dd:16:c4:ed:46:1a:43:af:05:96:
                    da:d6:2e:0f:03:f1:e2:92:69:2b:29:f1:22:82:cf:
                    be:70:dd:a0:6f:98:81:f8:17:dd:59:a7:17:ae:78:
                    ce:fd:7c:22:2f:75:56:32:75:3e:fa:ca:9e:00:a9:
                    17:4e:11:ea:ca:b7:47:32:67:21:7b:6e:d9:10:91:
                    99:c3:48:18:be:ca:f9:c5:8b:99:3f:25:0c:8f:6d:
                    27:6d:b1:83:2e:7d:e4:f4:0c:fd:05:a7:93:3a:28:
                    16:25:4e:33:df:9e:01:4f:9f:23:14:7e:22:17:40:
                    d2:7d:40:9e:e3:14:77:17:5b:20:d0:e5:8b:38:18:
                    19:4c:c7:be:be:d8:6e:64:de:5c:12:15:16:fd:f6:
                    4b:ee:0c:2d:38:9e:ca:05:11:fe:4e:31:a3:cc:55:
                    6f:af:11:08:40:e1:b2:be:73:02:0c:c7:c6:00:39:
                    17:76:bf:4d:95:95:d0:69:06:8a:f5:4f:fb:cc:8a:
                    49:44:be:80:1d:c3:f2:77:ad:69:d0:e3:55:52:a6:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                08:3E:B8:1C:CB:84:39:B1:8D:B6:47:DF:F8:FE:61:E1:C8:11:D0:BE
            X509v3 Authority Key Identifier: 
                keyid:8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC

            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/rootr3
                CA Issuers - URI:http://secure.globalsign.com/cacert/root-r3.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.com/root-r3.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.3.6.1.4.1.4146.10.1.2
                  CPS: https://www.globalsign.com/repository/

    Signature Algorithm: sha256WithRSAEncryption
         16:77:fe:3d:66:33:e5:4b:1f:ad:d3:f1:4e:8c:1a:cd:b3:e9:
         de:ff:29:aa:77:70:4a:1b:24:e1:8d:66:22:f3:3a:10:57:b7:
         ee:d8:bb:cb:54:b9:e1:62:59:3d:bf:c0:95:e7:af:b8:52:20:
         2e:06:83:5e:23:27:38:46:a2:c6:cf:30:fc:a6:cb:0c:c2:8f:
         e5:e4:c6:bf:4e:33:a3:dd:66:cd:68:d5:6d:2d:88:26:f9:ce:
         2d:75:64:61:a8:4d:a1:19:4e:5d:b0:bc:46:69:16:72:d3:b8:
         10:98:8f:79:d0:95:61:f7:06:64:16:78:cd:bd:55:58:b1:c9:
         e3:bd:72:f3:61:24:77:09:83:62:89:2d:45:ff:55:56:77:38:
         06:bf:40:32:60:af:3e:86:6a:72:e3:09:da:fd:90:3b:f1:b9:
         d7:ec:94:31:3c:23:a6:67:a7:cd:ec:cf:81:8e:5c:75:10:1c:
         74:75:0d:69:6a:79:ad:13:c4:25:19:b6:d2:6c:24:62:b1:68:
         e4:a1:89:36:e8:f1:c7:34:4e:19:1c:2d:3b:ba:25:32:58:f8:
         a9:40:c2:9a:32:e2:9f:29:1a:4b:df:4e:c3:e2:35:0e:d1:42:
         97:06:6c:b9:c7:2d:be:03:ce:32:2f:8b:61:37:b2:f8:54:d0:
         18:26:a8:7d

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06