gtsy3.der: CN=GTS Y3,O=Google Trust Services LLC,C=US (Intermediate Certificate, Expiring 2030-01-30) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://pki.goog/repo/certs/gtsy3.der (in DER format )
Serial Number : 158037435817088685825385012907
SHA-1 Fingerprint : 762c6a94dc8a513484849d6a6010277d0fff972a
SHA-1 Fingerprint : 76:2c:6a:94:dc:8a:51:34:84:84:9d:6a:60:10:27:7d:0f:ff:97:2a
SHA-256 Fingerprint : 181dc8be7e91edf163e66cc3fad14d979a6dae53b556daee8f7dca0e114c14f6
SHA-256 Fingerprint : 18:1d:c8:be:7e:91:ed:f1:63:e6:6c:c3:fa:d1:4d:97:9a:6d:ae:53:b5:56:da:ee:8f:7d:ca:0e:11:4c:14:f6
Signature Hash Algorithm : sha384
Subject : CN=GTS Y3,O=Google Trust Services LLC,C=US
- Country Name: US (United States of America)
- Organization: Google Trust Services LLC
- Common Name: GTS Y3
Not Valid Before: 2020-01-30 00:00:42
Not Valid After: 2030-01-30 00:00:42
Issuer (Parent Certificate):
- Issuer Name: CN=GTS Root R3,O=Google Trust Services LLC,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=GTS Root R3,O=Google Trust Services LLC,C=US .

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/gtsy3.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/gtsy3.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fe:a5:80:c2:58:a7:31:cb:c3:b3:9e:ab
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS Root R3
        Validity
            Not Before: Jan 30 00:00:42 2020 GMT
            Not After : Jan 30 00:00:42 2030 GMT
        Subject: C=US, O=Google Trust Services LLC, CN=GTS Y3
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:f2:b7:e4:6e:34:f0:c7:57:62:c6:69:31:93:76:
                    fc:76:1b:0d:09:84:42:9e:92:af:ea:34:fd:82:7b:
                    b9:06:d2:65:2b:79:06:fe:5e:7b:1d:13:3d:13:5f:
                    c6:c0:4a:e7:a4:1c:43:06:79:0b:79:e7:be:41:bd:
                    d5:c4:65:87:b3
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                AA:63:D5:82:17:3D:34:53:3C:45:40:4C:8C:25:DA:87:BC:D1:9E:1E
            X509v3 Authority Key Identifier: 
                keyid:C1:F1:26:BA:A0:2D:AE:85:81:CF:D3:F1:2A:12:BD:B8:0A:67:FD:BC

            Authority Information Access: 
                OCSP - URI:http://ocsp.pki.goog/gtsr3
                CA Issuers - URI:http://pki.goog/gtsr3/gtsr3.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.pki.goog/gtsr3/gtsr3.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2

    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:30:53:b6:81:b8:79:f4:81:af:43:a4:8f:a9:54:fc:
         74:87:0a:35:35:67:8d:b2:37:c5:f0:c3:ae:f4:79:7f:a5:1e:
         10:bb:2a:e2:ff:f2:27:f6:e6:5f:0b:b4:34:0c:dc:ed:02:31:
         00:e0:d3:ac:a3:0f:d7:38:e5:0f:a8:ae:34:83:c2:c5:60:c7:
         55:ab:a7:19:75:97:78:df:6e:d0:f5:0b:b6:e2:99:96:1b:bb:
         9c:b3:cc:13:2a:4a:ed:3c:ab:bd:eb:a0:cf

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates