GeoTrustTLSRSACAG1.crt: CN=GeoTrust TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US

Last Updated: 2022-03-26

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

Certificate download URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt (DER format)
Serial number: 17318747245906231087668175401711030649
SHA-1 Fingerprint: 8b3c5b9b867d4be46d1cb5a01d45d67dc8e94082
SHA-1 Fingerprint: 8b:3c:5b:9b:86:7d:4b:e4:6d:1c:b5:a0:1d:45:d6:7d:c8:e9:40:82
SHA-256 Fingerprint: c06e307f7cfc1d32fa72a4c033c87b90019af216f0775d64978a2eca6c8a230e
SHA-256 Fingerprint: c0:6e:30:7f:7c:fc:1d:32:fa:72:a4:c0:33:c8:7b:90:01:9a:f2:16:f0:77:5d:64:97:8a:2e:ca:6c:8a:23:0e
Signature hash algorithm: sha256
Subject: CN=GeoTrust TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US
Not valid before: 2017-11-02 12:23:37
Not valid after: 2027-11-02 12:23:37
Issuer:
- Issuer name: CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:07:78:2a:13:3f:c6:f9:a5:72:96:e1:31:ff:d1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
        Validity
            Not Before: Nov  2 12:23:37 2017 GMT
            Not After : Nov  2 12:23:37 2027 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:17:e8:ec:be:29:0a:cb:fe:b9:2d:61:31:fd:
                    33:24:08:32:2e:59:e8:21:d4:d8:30:be:6e:10:c8:
                    84:a0:3f:ba:14:e5:de:fd:7a:8c:92:1b:7b:ce:84:
                    2d:f0:ff:78:c4:32:e8:a9:a0:7d:5f:06:da:7b:9b:
                    4b:53:a6:c6:1b:02:17:21:e1:70:3b:ad:fb:83:eb:
                    08:54:81:a8:de:12:b2:d5:c6:88:96:30:f9:02:fc:
                    39:d4:bd:b8:22:ef:80:49:99:d0:62:b8:61:d0:49:
                    de:cb:c2:cb:97:a5:31:06:1b:d7:d8:5d:c6:d3:54:
                    de:52:01:36:2a:0d:f6:de:c5:b6:31:4c:cc:15:25:
                    6a:15:6f:a9:6b:04:48:0c:de:00:41:aa:28:80:8b:
                    2f:34:d3:1b:b5:36:ad:3b:25:d0:88:42:40:6c:36:
                    91:6d:65:b2:19:86:c0:d2:7f:39:46:58:fe:30:12:
                    60:50:dc:ee:bb:73:e6:57:90:5a:f6:0d:ca:d7:04:
                    4b:47:6a:6f:34:1a:9d:92:36:1a:2e:d9:4e:54:ed:
                    47:ac:0c:bf:f1:80:b2:ba:ff:47:7b:e9:39:c4:54:
                    c4:94:54:99:19:f1:57:99:af:e2:14:22:5b:e8:2e:
                    bb:63:2d:ba:ae:81:bd:13:dc:e6:17:5b:e0:90:53:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
            X509v3 Authority Key Identifier: 
                keyid:4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         82:1c:04:3a:82:e9:c5:a9:c8:65:12:5c:08:e3:01:c6:30:b0:
         ae:22:88:61:7b:2b:07:86:f7:b8:b5:44:9c:f5:93:06:61:46:
         8a:3a:a2:b5:35:26:d0:58:9e:3c:c1:73:8f:bf:b1:79:a7:1c:
         99:37:9a:53:f2:2f:5c:6e:20:0b:7d:b0:c7:82:ef:eb:eb:79:
         12:05:e7:01:41:0b:43:02:37:9b:1b:1f:08:4d:37:52:73:29:
         b8:9f:35:e3:f9:a3:3a:59:75:01:66:90:2a:3e:9d:e0:62:29:
         1e:87:a8:80:3e:2c:c4:cc:08:c3:2e:bf:69:21:18:6b:8f:1e:
         6b:43:cd:ee:06:98:41:99:b5:82:f2:17:c1:10:a5:ae:58:8c:
         fb:95:ea:4d:82:af:f3:77:5f:11:69:4f:78:51:a6:df:f7:ba:
         c5:3f:65:bf:70:7c:a3:ed:5a:9a:33:9d:9e:3f:e3:87:35:a7:
         da:f3:15:c6:58:ad:69:23:dc:0f:bb:4c:d0:49:13:41:a6:3f:
         67:e1:5e:13:f5:0f:f5:d5:7c:85:bf:87:4c:82:24:61:22:57:
         d1:a5:9b:fb:86:39:ad:c3:5c:79:66:6c:07:31:4b:20:91:ad:
         a1:be:64:19:00:ee:1e:12:78:ce:98:f2:5f:fb:30:14:69:3c:
         2c:fa:97:c6

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Basic Information

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates