GeoTrustTLSRSACAG1.crt: CN=GeoTrust TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US
Page content
CA Certificate Basic Information
This certificate is root certificate used for the issuance of other certificates.
- Certificate download URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
(
DER
format) - Serial number: 17318747245906231087668175401711030649
- SHA-1 Fingerprint: 8b3c5b9b867d4be46d1cb5a01d45d67dc8e94082
- SHA-1 Fingerprint: 8b:3c:5b:9b:86:7d:4b:e4:6d:1c:b5:a0:1d:45:d6:7d:c8:e9:40:82
- SHA-256 Fingerprint: c06e307f7cfc1d32fa72a4c033c87b90019af216f0775d64978a2eca6c8a230e
- SHA-256 Fingerprint: c0:6e:30:7f:7c:fc:1d:32:fa:72:a4:c0:33:c8:7b:90:01:9a:f2:16:f0:77:5d:64:97:8a:2e:ca:6c:8a:23:0e
- Signature hash algorithm: sha256
- Subject: CN=GeoTrust TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US
- Not valid before: 2017-11-02 12:23:37
- Not valid after: 2027-11-02 12:23:37
- Issuer:
- Issuer name: CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer certificate URL: None
Download certificate through curl
:
curl -sSL http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt --output cert.crt
Download certificate through wget
:
wget -q http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt --output-document=cert.crt
CA Certificate Detail Information
Use openssl x509
to decode certificate to get detail information:
openssl x509 -in cert.crt -inform der -text -noout
Decoded detail certificate information:
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:07:78:2a:13:3f:c6:f9:a5:72:96:e1:31:ff:d1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
Validity
Not Before: Nov 2 12:23:37 2017 GMT
Not After : Nov 2 12:23:37 2027 GMT
Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:be:17:e8:ec:be:29:0a:cb:fe:b9:2d:61:31:fd:
33:24:08:32:2e:59:e8:21:d4:d8:30:be:6e:10:c8:
84:a0:3f:ba:14:e5:de:fd:7a:8c:92:1b:7b:ce:84:
2d:f0:ff:78:c4:32:e8:a9:a0:7d:5f:06:da:7b:9b:
4b:53:a6:c6:1b:02:17:21:e1:70:3b:ad:fb:83:eb:
08:54:81:a8:de:12:b2:d5:c6:88:96:30:f9:02:fc:
39:d4:bd:b8:22:ef:80:49:99:d0:62:b8:61:d0:49:
de:cb:c2:cb:97:a5:31:06:1b:d7:d8:5d:c6:d3:54:
de:52:01:36:2a:0d:f6:de:c5:b6:31:4c:cc:15:25:
6a:15:6f:a9:6b:04:48:0c:de:00:41:aa:28:80:8b:
2f:34:d3:1b:b5:36:ad:3b:25:d0:88:42:40:6c:36:
91:6d:65:b2:19:86:c0:d2:7f:39:46:58:fe:30:12:
60:50:dc:ee:bb:73:e6:57:90:5a:f6:0d:ca:d7:04:
4b:47:6a:6f:34:1a:9d:92:36:1a:2e:d9:4e:54:ed:
47:ac:0c:bf:f1:80:b2:ba:ff:47:7b:e9:39:c4:54:
c4:94:54:99:19:f1:57:99:af:e2:14:22:5b:e8:2e:
bb:63:2d:ba:ae:81:bd:13:dc:e6:17:5b:e0:90:53:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
X509v3 Authority Key Identifier:
keyid:4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
X509v3 Key Usage: critical
Digital Signature, Certificate Sign, CRL Sign
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
X509v3 Certificate Policies:
Policy: X509v3 Any Policy
CPS: https://www.digicert.com/CPS
Signature Algorithm: sha256WithRSAEncryption
82:1c:04:3a:82:e9:c5:a9:c8:65:12:5c:08:e3:01:c6:30:b0:
ae:22:88:61:7b:2b:07:86:f7:b8:b5:44:9c:f5:93:06:61:46:
8a:3a:a2:b5:35:26:d0:58:9e:3c:c1:73:8f:bf:b1:79:a7:1c:
99:37:9a:53:f2:2f:5c:6e:20:0b:7d:b0:c7:82:ef:eb:eb:79:
12:05:e7:01:41:0b:43:02:37:9b:1b:1f:08:4d:37:52:73:29:
b8:9f:35:e3:f9:a3:3a:59:75:01:66:90:2a:3e:9d:e0:62:29:
1e:87:a8:80:3e:2c:c4:cc:08:c3:2e:bf:69:21:18:6b:8f:1e:
6b:43:cd:ee:06:98:41:99:b5:82:f2:17:c1:10:a5:ae:58:8c:
fb:95:ea:4d:82:af:f3:77:5f:11:69:4f:78:51:a6:df:f7:ba:
c5:3f:65:bf:70:7c:a3:ed:5a:9a:33:9d:9e:3f:e3:87:35:a7:
da:f3:15:c6:58:ad:69:23:dc:0f:bb:4c:d0:49:13:41:a6:3f:
67:e1:5e:13:f5:0f:f5:d5:7c:85:bf:87:4c:82:24:61:22:57:
d1:a5:9b:fb:86:39:ad:c3:5c:79:66:6c:07:31:4b:20:91:ad:
a1:be:64:19:00:ee:1e:12:78:ce:98:f2:5f:fb:30:14:69:3c:
2c:fa:97:c6
CA Certificate in PEM Format
Use openssl x509
to convert certificate from DER
format to PEM
format:
openssl x509 -in cert.crt -inform der
Converted PEM
format certificate:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Also see Top 1 Millions Domains CA Certificate List
Related Certificates
- GeoTrustECCCA2018.crt: CN=GeoTrust ECC CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US
- GeoTrustEVECCCA2018.crt: CN=GeoTrust EV ECC CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US
- GeoTrustEVRSACA2018.crt: CN=GeoTrust EV RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US
- GeoTrustRSACA2018.crt: CN=GeoTrust RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US
- GeoTrustTLSECCCAG1.crt: CN=GeoTrust TLS ECC CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US