01F09C5B452806A4BB42822065.der: CN=GTS Y3,O=Google Trust Services LLC,C=US (Intermediate Certificate, Expiring 2028-11-01) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/01F09C5B452806A4BB42822065.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/01F09C5B452806A4BB42822065.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f0:9c:5b:45:28:06:a4:bb:42:82:20:65
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS Root R3
        Validity
            Not Before: Nov  1 00:00:42 2018 GMT
            Not After : Nov  1 00:00:42 2028 GMT
        Subject: C=US, O=Google Trust Services LLC, CN=GTS Y3
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:f2:b7:e4:6e:34:f0:c7:57:62:c6:69:31:93:76:
                    fc:76:1b:0d:09:84:42:9e:92:af:ea:34:fd:82:7b:
                    b9:06:d2:65:2b:79:06:fe:5e:7b:1d:13:3d:13:5f:
                    c6:c0:4a:e7:a4:1c:43:06:79:0b:79:e7:be:41:bd:
                    d5:c4:65:87:b3
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                AA:63:D5:82:17:3D:34:53:3C:45:40:4C:8C:25:DA:87:BC:D1:9E:1E
            X509v3 Authority Key Identifier: 
                keyid:C1:F1:26:BA:A0:2D:AE:85:81:CF:D3:F1:2A:12:BD:B8:0A:67:FD:BC

            Authority Information Access: 
                OCSP - URI:http://ocsp.pki.goog/gtsr3
                CA Issuers - URI:http://pki.goog/gtsr3/gtsr3.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.pki.goog/gtsr3/gtsr3.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2

    Signature Algorithm: ecdsa-with-SHA256
         30:63:02:2f:78:0f:4d:01:95:aa:d3:c1:39:80:4f:30:82:65:
         75:b0:a9:12:d2:c3:1a:46:f1:23:72:b3:48:e4:90:be:ce:00:
         45:65:60:9b:f0:85:e6:86:69:2d:05:68:17:5f:4a:02:30:1d:
         ac:08:85:3b:6f:df:99:59:ca:69:9a:1e:c5:a8:5d:26:04:a7:
         b8:9b:6d:9c:cd:d7:c3:13:f0:3b:24:55:a2:85:cc:f3:4d:2a:
         62:07:0e:95:98:79:fa:19:d0:bd:7d

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06