Microsoft EV ECC Root Certificate Authority 2017.crt: CN=Microsoft EV ECC Root Certificate Authority 2017,O=Microsoft Corporation,C=US (Root Certificate, Expiring 2042-07-18) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://www.microsoft.com/pkiops/certs/Microsoft%20EV%20ECC%20Root%20Certificate%20Authority%202017.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www.microsoft.com/pkiops/certs/Microsoft%20EV%20ECC%20Root%20Certificate%20Authority%202017.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:af:4e:52:c2:60:57:9b:44:9c:1d:de:01:c8:e3:19
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Microsoft Corporation, CN=Microsoft EV ECC Root Certificate Authority 2017
        Validity
            Not Before: Dec 18 22:22:16 2019 GMT
            Not After : Jul 18 22:31:43 2042 GMT
        Subject: C=US, O=Microsoft Corporation, CN=Microsoft EV ECC Root Certificate Authority 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:34:dd:f9:d7:00:ab:e1:26:2a:5f:9a:36:8b:b0:
                    bc:c9:c0:05:73:cc:d5:d6:21:cb:f6:57:fc:cf:b5:
                    8b:bd:e6:34:af:20:b1:3d:49:aa:c5:67:55:82:e1:
                    ed:30:dd:6b:ed:45:cb:7c:2d:a1:ac:ae:97:1f:3f:
                    76:60:51:7f:ac:ca:8b:ff:a5:9b:41:e5:d3:4a:f2:
                    25:d5:01:db:fd:fb:6c:4e:c9:96:a3:dd:f7:53:34:
                    2b:77:1e:31:56:c2:bf
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                63:E7:F4:E0:22:0A:CC:B0:16:CF:B4:3F:06:F5:83:F0:DF:F9:5B:91
            1.3.6.1.4.1.311.21.1: 
                ...
    Signature Algorithm: ecdsa-with-SHA384
         30:66:02:31:00:dd:31:98:58:f0:03:c4:1c:21:fb:6a:db:39:
         4c:c3:02:7a:bf:ba:28:69:ab:85:5b:31:41:d8:d4:c3:cb:7a:
         d9:08:18:17:1b:f9:35:3c:aa:7e:27:09:8e:f8:63:47:dd:02:
         31:00:fc:a0:f3:ee:cb:65:26:41:b8:90:57:fe:53:bf:b3:c4:
         3b:f1:53:68:e0:b9:39:05:60:c3:1b:83:e0:56:ae:ef:f6:46:
         e2:42:60:c0:bb:53:5e:c6:ac:52:c7:5f:8a:ed

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06