ecert_ca_2-17_pem.crt: CN=Hongkong Post e-Cert CA 2 - 17,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Intermediate Certificate, Expiring 2032-08-12) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://www1.ecert.gov.hk/root/ecert_ca_2-17_pem.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www1.ecert.gov.hk/root/ecert_ca_2-17_pem.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:00:7d:78:98:e1:c0:f0:c7:e2:4c:00:cf:4a:eb:31:31:ea:4e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 2
        Validity
            Not Before: Aug 12 03:49:22 2017 GMT
            Not After : Aug 12 03:49:22 2032 GMT
        Subject: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post e-Cert CA 2 - 17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:9b:ba:4d:15:6f:5e:10:be:ed:e7:02:e6:
                    65:64:a8:f1:02:f1:3d:c4:a9:92:ae:e9:9a:14:d5:
                    e0:e6:91:93:d7:6b:8e:e3:42:94:7d:41:ca:5b:cb:
                    9f:7a:02:6a:97:ba:38:8d:b8:3b:4d:eb:3f:cd:c5:
                    b4:8f:8a:72:26:6f:f0:6c:6e:18:b1:98:d6:93:55:
                    ec:13:26:e7:cd:44:c2:9e:c6:5a:72:65:ea:7b:d3:
                    3b:80:0b:48:69:fc:da:2d:6f:0a:ff:1f:94:6b:14:
                    cf:62:f8:5d:cf:94:31:13:90:03:9c:6f:58:30:ff:
                    85:91:e9:a2:05:0c:66:ac:ea:8d:d7:3a:7e:57:00:
                    77:5e:64:47:21:3e:3d:b4:74:29:bb:eb:dc:1a:e3:
                    04:8e:98:69:a0:4f:0e:f7:ae:e6:96:e7:bf:8b:64:
                    a7:5b:cc:df:4a:de:56:62:84:ca:5c:64:5b:73:d1:
                    83:b4:e4:e0:e2:b1:9b:d2:7a:ad:4f:2c:f1:4e:45:
                    0c:6f:eb:48:44:3c:14:d2:11:b9:f4:03:88:f7:65:
                    c7:db:3c:bb:0f:57:e0:be:b6:02:14:9d:26:7f:b4:
                    32:b0:45:a3:07:51:4b:fc:9e:f1:aa:68:3f:7a:3f:
                    3b:03:51:89:6e:ef:a9:79:a9:f5:b5:75:38:b1:89:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                CA Issuers - URI:http://www1.hongkongpost.gov.hk/root/root_ca_2.crt

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: www.hongkongpost.gov.hk

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Authority Key Identifier: 
                keyid:61:B5:E0:42:DE:B6:AF:A7:20:EA:F6:24:C8:A7:9D:85:A0:58:53:D8

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl1.hongkongpost.gov.hk/crl/RootCA2ARL.crl

            X509v3 Subject Key Identifier: 
                D2:35:37:BA:4F:52:F7:B6:E4:5D:BD:D6:F0:C7:EB:81:ED:A1:F0:6D
    Signature Algorithm: sha256WithRSAEncryption
         d9:48:39:94:35:12:fd:28:d0:79:4f:4a:ed:04:44:98:81:da:
         9c:53:29:bc:03:93:26:69:3b:e7:51:9c:2c:6b:38:a1:47:42:
         81:5c:1d:fb:8c:35:73:01:bd:c6:24:7e:2b:08:d5:21:fb:1a:
         cb:2e:30:cc:b5:02:30:2d:be:b8:cc:33:ef:88:b9:c5:f8:a2:
         07:8c:a3:b6:90:cd:f2:67:72:b5:22:63:21:50:5c:ac:cb:2d:
         64:79:b1:f0:4a:b5:b1:ea:8f:94:93:c3:77:1f:f0:7a:7f:1d:
         be:9c:bc:2a:ee:87:16:26:24:e6:d1:40:c0:72:bb:2e:1e:26:
         59:7d:4c:7f:da:73:43:b2:d2:c9:3c:41:e3:5c:4f:aa:c7:cf:
         bd:ce:ff:1b:e2:3b:6d:86:4b:3f:a9:fd:75:3c:f6:b1:f7:3f:
         6f:0d:8a:37:76:d3:36:76:75:8a:96:6d:4c:09:3b:b4:71:75:
         1a:7e:46:39:f5:b0:d3:e3:67:7e:af:87:87:c5:13:36:ce:24:
         a2:d9:c7:59:c3:f7:ae:cb:a2:a5:93:d8:d0:81:72:2f:29:c7:
         06:01:f7:61:72:3a:eb:8d:f2:db:d0:a1:69:14:33:9e:84:93:
         be:5b:50:b2:0a:d4:30:62:20:42:b8:d9:fa:ed:46:b4:60:a4:
         ee:96:62:ae:20:58:92:7a:5b:27:17:37:22:c6:c4:41:4d:a5:
         54:d2:ba:07:3c:73:2c:ec:5d:28:6c:05:88:83:0c:c7:01:31:
         55:ee:7a:83:e7:e8:47:48:ed:77:2c:bb:06:d3:dd:cd:59:b0:
         5d:9a:22:0a:e1:5d:3d:33:cb:8f:af:32:17:a3:ad:6d:ea:11:
         f2:6b:76:de:d8:21:a1:0d:fa:cd:75:5d:8b:52:a5:86:a2:77:
         e0:62:32:99:cc:0f:5d:94:37:cd:fc:7e:b0:17:04:19:40:96:
         59:47:7b:f1:55:1c:4e:41:c9:45:fd:f1:0c:1d:1a:18:b2:b9:
         60:de:f1:0a:ad:0e:06:07:e4:2d:c2:a2:95:4c:04:59:20:cf:
         6d:14:5e:08:ee:86:39:b6:03:be:76:3c:26:cf:1c:48:db:55:
         aa:38:57:40:f7:8a:be:36:f9:80:5e:b7:64:3f:02:fa:36:4e:
         6b:69:83:84:c7:f9:b5:af:11:ff:02:d9:99:b1:81:81:6f:19:
         e3:62:2e:98:0e:06:fd:fc:82:0b:8c:65:88:cf:7b:86:11:58:
         6f:78:9b:a7:62:bf:5b:a6:1b:fd:ce:9d:5f:d3:bb:b9:fd:0f:
         7b:05:07:3a:8f:96:dc:1c:f3:1e:15:fe:3d:68:e6:c3:13:20:
         19:1c:d6:4d:25:76:06:6b

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06