ecert_ev_ssl_ca_3-17_pem.crt: CN=Hongkong Post e-Cert EV SSL CA 3 - 17,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Intermediate Certificate, Expiring 2032-06-03) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://www1.ecert.gov.hk/root/ecert_ev_ssl_ca_3-17_pem.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www1.ecert.gov.hk/root/ecert_ev_ssl_ca_3-17_pem.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ed:49:dd:a3:79:25:92:57:8c:32:51:20:da:22:e9:f1:e1:0b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 3
        Validity
            Not Before: Jun  3 04:10:25 2017 GMT
            Not After : Jun  3 04:10:25 2032 GMT
        Subject: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post e-Cert EV SSL CA 3 - 17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:2d:8a:02:1f:6f:32:43:49:85:d6:98:c0:
                    6c:b4:25:1f:7e:67:92:7c:d3:0b:31:df:bf:ff:f2:
                    6e:bd:a0:f8:be:48:2a:e0:27:19:6d:8f:25:2e:09:
                    b0:e4:d8:4c:9c:d6:83:be:a5:cc:14:53:48:17:b4:
                    b2:3d:30:44:86:a7:0f:36:cb:f1:6c:48:5d:a1:9f:
                    3e:fe:8b:55:c9:cd:9c:6f:99:aa:f9:01:1f:28:67:
                    8d:dc:0d:ce:d2:9d:68:f2:86:93:15:fb:e4:03:d5:
                    e5:fd:73:ac:b5:ba:39:f2:99:d8:03:14:3d:86:38:
                    7d:11:4f:3e:9b:84:a1:0c:8e:07:a3:ec:a4:ab:4c:
                    23:e0:41:44:69:50:af:e0:ad:15:0e:0b:9e:d7:a3:
                    d5:ec:b2:52:1e:f4:8b:9a:1a:47:c8:62:d9:d4:26:
                    31:8e:03:83:e0:03:e1:4a:06:6c:de:26:5b:98:b2:
                    7e:3a:3d:ce:cd:32:c1:ff:83:da:89:d7:e6:47:d5:
                    1c:78:41:b0:03:bf:c4:3d:cd:2f:29:d2:26:72:7c:
                    ac:2a:f1:be:60:91:02:82:8c:69:c4:30:89:ae:34:
                    9f:c5:e0:48:34:a4:8b:00:f0:2f:34:af:a3:b4:86:
                    49:53:5d:dd:af:4c:63:2a:f2:f9:ad:bf:de:ef:5b:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                CA Issuers - URI:http://www1.hongkongpost.gov.hk/root/root_ca_3.crt
                OCSP - URI:http://ocsp1.hongkongpost.gov.hk

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: www.hongkongpost.gov.hk

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Authority Key Identifier: 
                keyid:17:9D:CD:1E:8B:D6:39:2B:70:D3:5C:D4:A0:B8:1F:B0:00:FC:C5:61

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl1.hongkongpost.gov.hk/crl/RootCA3ARL.crl

            X509v3 Subject Key Identifier: 
                7F:31:8D:6D:A9:C5:07:22:60:FA:19:1F:86:40:E9:07:AF:E9:E0:41
    Signature Algorithm: sha256WithRSAEncryption
         78:5c:45:fa:d2:a7:63:cb:62:8f:b9:55:ff:35:19:ab:64:80:
         6d:35:83:f7:c0:53:73:5d:cf:a5:59:e7:10:fa:41:75:97:da:
         54:52:1a:d2:a9:9e:8f:58:27:d6:40:f4:61:e1:21:f4:df:50:
         7b:e3:e8:d6:86:1b:ff:78:1d:c7:21:71:f9:34:39:6f:92:c9:
         db:43:42:04:13:56:2a:70:79:71:28:8f:37:23:41:96:32:48:
         fd:5c:aa:ec:e2:23:e7:e1:7e:70:68:b6:a9:c8:8d:62:be:91:
         05:7f:f1:91:93:a4:42:7f:6c:80:94:32:68:18:9a:94:16:d4:
         28:8f:eb:67:82:16:59:f2:13:3d:31:f6:93:41:8a:1e:08:d8:
         ac:33:74:74:5b:52:bf:7a:ce:1b:a4:ec:55:db:d6:97:5c:20:
         36:2a:8e:4a:7d:a4:4f:b6:8e:1e:b7:37:96:5a:1a:3f:1e:41:
         82:bc:be:35:7a:71:58:a7:57:a9:af:c1:d2:38:fd:c1:bd:da:
         12:e3:9e:ec:b5:99:c7:7e:75:ae:a2:b4:de:55:ed:6c:2e:97:
         80:49:75:0e:09:3a:da:dd:bc:f6:f3:70:24:82:31:fd:ad:4f:
         7a:6b:0f:6f:dd:a8:f1:3b:d7:0a:70:9e:aa:cf:fe:d6:df:85:
         f7:d1:d5:b6:87:73:1d:30:16:7b:d0:c8:1f:7b:82:c9:52:ac:
         3f:30:c2:fe:13:7d:10:e9:ea:f4:11:9a:78:a4:75:d4:45:3c:
         87:18:a5:85:22:20:f4:c9:c5:7c:06:d9:70:84:a8:c3:0b:c1:
         c7:f5:7d:9a:0c:04:d6:5e:c4:07:8b:9c:f2:52:b3:67:52:cd:
         ef:fc:9a:54:6b:84:c5:fb:0e:c7:09:f2:26:52:ff:e6:3a:d1:
         0f:9d:9b:73:85:e5:3b:8b:c8:7b:f2:ee:3f:a2:1e:f0:76:9a:
         0c:76:89:f0:ca:aa:08:58:d6:a5:a0:bf:70:f0:b9:11:96:61:
         56:f9:05:00:70:f5:96:53:10:a7:1d:4e:23:4d:fb:e5:f5:71:
         dd:b6:26:e3:6e:84:ad:7e:b6:f1:92:e2:83:45:06:b4:51:6b:
         00:ea:03:c0:e7:59:45:41:17:5b:53:45:1a:b6:69:6e:82:be:
         ed:50:99:b8:e9:e8:bb:a1:3e:3b:1a:f2:6d:91:ab:14:21:a4:
         91:dd:2a:78:be:ea:3b:11:0b:08:d5:a3:da:ae:bd:00:ce:58:
         b4:7d:37:ac:40:bf:fd:24:1c:be:f3:4d:25:5c:a3:06:4a:fa:
         bd:3c:e0:23:c8:b9:7d:c2:dd:69:92:5f:c5:17:4c:72:51:1a:
         97:37:4a:b6:1a:5d:7b:d9

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06