GeoTrustEVRSACAG2.crt: CN=GeoTrust EV RSA CA G2,O=DigiCert Inc,C=US

Last Updated: 2022-03-26

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

Certificate download URL: http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt (DER format)
Serial number: 17778797353455473341574655806399419776
SHA-1 Fingerprint: 687d4a4d47014f91217e4a062bbf9d238358943e
SHA-1 Fingerprint: 68:7d:4a:4d:47:01:4f:91:21:7e:4a:06:2b:bf:9d:23:83:58:94:3e
SHA-256 Fingerprint: 2d140f20b8a96e2b4d2f1cc5aca5e5a1e7dc56a7491e510906960f38d2d21aef
SHA-256 Fingerprint: 2d:14:0f:20:b8:a9:6e:2b:4d:2f:1c:c5:ac:a5:e5:a1:e7:dc:56:a7:49:1e:51:09:06:96:0f:38:d2:d2:1a:ef
Signature hash algorithm: sha256
Subject: CN=GeoTrust EV RSA CA G2,O=DigiCert Inc,C=US
Not valid before: 2020-07-02 12:42:57
Not valid after: 2030-07-02 12:42:57
Issuer:
- Issuer name: CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:60:12:62:c8:a7:72:1a:6e:ab:03:61:e5:61:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
        Validity
            Not Before: Jul  2 12:42:57 2020 GMT
            Not After : Jul  2 12:42:57 2030 GMT
        Subject: C=US, O=DigiCert Inc, CN=GeoTrust EV RSA CA G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:bc:53:0c:18:83:88:0f:63:7e:ae:9c:9a:
                    19:33:df:c8:8b:69:dd:ab:42:ca:29:91:24:23:ed:
                    01:a9:14:f7:ce:04:07:5f:59:ba:0a:db:f3:6b:a2:
                    d2:2c:b4:cc:b2:8c:0e:b3:ae:37:e2:ae:1f:a8:c5:
                    e0:5e:19:0a:81:e3:37:bb:45:74:cb:52:b0:25:00:
                    6e:ba:45:54:ef:f9:04:b6:3e:55:32:20:ed:85:0d:
                    e4:bc:11:1d:46:f6:41:54:86:c0:ac:88:79:84:be:
                    4a:a3:d5:f2:6c:d3:32:41:bd:1a:75:a3:1b:52:10:
                    4f:41:75:f9:7b:bb:fa:e0:06:44:55:67:21:d6:02:
                    48:18:25:ee:21:b8:a8:e5:99:8d:c3:ca:9d:6f:b7:
                    38:94:4e:75:9b:70:18:4d:fd:13:b5:a8:6a:ca:16:
                    f0:db:e9:bb:91:45:a7:65:88:b2:f6:3a:07:fd:30:
                    86:bd:f0:fb:12:9e:05:86:f6:58:d2:88:d5:95:ef:
                    93:8c:be:02:65:1a:05:d4:53:63:41:cf:05:9e:3e:
                    e8:8a:5c:ab:64:65:f9:02:d0:5d:0b:86:5c:7f:79:
                    62:e8:d8:35:8a:5b:9d:5e:c0:49:4e:7f:75:59:aa:
                    54:f6:34:2c:79:e9:da:c3:4a:20:de:b9:fe:7f:83:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                28:D2:CF:EE:09:84:75:DD:B5:B2:B5:BF:3C:D5:A0:C6:73:88:5D:1F
            X509v3 Authority Key Identifier: 
                keyid:4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua

    Signature Algorithm: sha256WithRSAEncryption
         55:6d:0b:3c:28:3e:aa:46:73:9f:fd:db:4e:1c:d0:32:89:ea:
         11:70:0d:59:93:79:46:30:bc:2a:35:fb:8b:a5:36:fd:80:34:
         05:a6:fc:46:37:fd:d7:ee:2d:26:00:4b:51:84:df:eb:f5:f0:
         ef:f2:88:95:2e:7e:a0:7e:99:b4:51:43:78:ee:f1:49:0b:37:
         f9:76:a9:15:fc:de:cb:90:c4:ea:96:10:c0:d1:57:bf:18:12:
         77:03:61:39:c8:54:fb:4e:00:06:37:8c:09:f5:c0:99:ac:a6:
         ea:28:75:54:45:ab:70:27:e4:f9:f2:39:a1:6e:fb:44:33:bb:
         76:b9:c0:7b:bb:e0:e6:bb:82:a8:39:31:31:f0:b4:7c:fa:a9:
         fc:3b:22:e1:d5:52:ea:ef:9b:f3:0d:3b:27:85:33:79:dc:08:
         0f:74:c5:45:93:a1:7c:b2:34:f6:3f:6c:5b:bc:06:f4:90:09:
         72:02:d9:5d:02:da:46:bc:1c:d7:85:a7:26:46:ce:eb:4e:ac:
         ff:a1:30:f0:61:92:e4:ae:6f:aa:12:5b:5d:98:6c:14:39:6b:
         c5:3e:3c:2e:70:7e:ad:4b:e8:10:82:25:18:88:d2:6a:8a:3c:
         c8:d6:3a:fc:4d:9d:35:54:63:92:4d:6e:eb:45:42:a0:90:de:
         56:26:a0:c0

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Basic Information

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates