ocsp.crt: CN=certSIGN Validation Service,OU=certSIGN Validation Service,O=certSIGN,C=RO (Intermediate Certificate, Expiring 2017-02-02) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://crl.certsign.ro/ocsp.crt" --output cert.crt

Download certificate through wget:

wget -q "http://crl.certsign.ro/ocsp.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:06:05:16:70:04:04:03:a3:00:b5:28:c8:60:a6:21:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RO, O=certSIGN, OU=certSIGN Enterprise CA Class 3, CN=certSIGN Enterprise CA Class 3
        Validity
            Not Before: Feb  2 10:50:47 2016 GMT
            Not After : Feb  2 10:50:47 2017 GMT
        Subject: C=RO, O=certSIGN, OU=certSIGN Validation Service, CN=certSIGN Validation Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:50:8a:c0:05:e2:17:e5:84:54:8d:5f:ee:f7:
                    56:17:36:ab:c8:96:2d:92:e9:d1:6c:92:a7:74:de:
                    d8:99:94:42:2c:84:43:fa:b4:17:32:9f:9a:6c:fd:
                    38:61:7b:8b:81:27:bf:d3:8e:f9:46:2e:0c:68:14:
                    d1:4b:64:af:c8:9b:d2:ed:96:b3:7c:96:6d:85:b8:
                    cf:4c:91:65:b1:77:fe:2c:2b:65:65:80:33:0d:fe:
                    33:65:44:9f:b6:3c:68:03:27:0a:0a:ae:10:2e:9f:
                    24:99:bb:7c:fb:92:65:3b:f7:28:9d:6b:68:46:45:
                    fc:3c:1f:6e:45:f8:e2:33:5d:ad:57:d2:19:0a:56:
                    a3:0a:4b:ee:dc:84:dd:37:e0:b0:89:94:55:9a:57:
                    7a:06:cd:ac:4f:56:f0:8f:b5:60:22:4d:d3:0e:2a:
                    01:05:5f:69:77:63:68:bd:20:89:25:fb:ca:1e:d6:
                    27:98:7d:c5:a4:74:54:8e:2c:26:6d:c4:5a:63:c2:
                    9a:e9:00:20:7b:2d:3d:dd:92:42:be:35:2c:d4:6e:
                    03:ca:8f:3d:db:5e:e5:01:3e:2a:c4:66:7a:9b:6a:
                    6c:de:a7:b8:fb:7e:fa:5c:13:98:c0:7d:e5:a2:ab:
                    f2:67:f8:f8:9e:a6:b2:98:f8:25:6f:9e:9c:61:75:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.certsign.ro

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Authority Key Identifier: 
                keyid:6D:CD:0C:94:0C:E4:06:9C:AE:96:4F:2F:83:FD:DE:BA:25:CE:27:4B

            X509v3 Subject Key Identifier: 
                C8:37:7B:BB:C4:66:AC:3C:11:C4:84:46:2A:1A:31:F9:6D:6A:EE:87
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.25017.1.1.3
                  CPS: http://www.certsign.ro/repository

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.certsign.ro/enterprise.crl
                  URI:ldap://ldap.certsign.ro/CN=certSIGN Enterprise CA Class 3,OU=certSIGN Enterprise CA Class 3,O=certSIGN,C=RO?certificateRevocationList;binary

            X509v3 Subject Alternative Name: 
                othername:<unsupported>, email:office@certsign.ro
            X509v3 Extended Key Usage: 
                OCSP Signing
            OCSP No Check: 

    Signature Algorithm: sha256WithRSAEncryption
         02:4c:59:53:88:cf:61:ae:5f:d3:3f:96:0f:59:86:94:9a:46:
         24:57:a0:96:3e:25:b8:3a:3a:7c:c2:ff:f6:11:c2:f7:d3:25:
         e1:b1:01:6b:fd:1d:99:ab:f6:70:f2:56:ee:4e:83:06:19:1b:
         3a:ed:de:f9:68:da:01:16:29:79:98:64:5e:28:88:c0:01:26:
         ab:bc:1e:49:43:14:18:93:35:22:4a:fb:34:a0:a7:61:26:8a:
         4e:c0:2f:ac:95:d2:41:08:10:ad:98:c3:3c:1e:c0:5b:83:d1:
         24:04:0c:58:ef:3a:59:f7:0d:9c:7b:23:1f:4b:ee:57:70:5b:
         4d:17:9f:a6:6c:a1:c7:bc:43:8e:a0:1b:f4:06:e9:6c:73:72:
         0b:87:3f:44:0a:d2:6a:14:d1:d6:63:7f:af:f8:4d:c3:55:05:
         2b:0f:ae:8c:38:05:f2:9a:7a:01:e9:e1:6a:b8:37:69:04:b7:
         a2:2f:23:15:25:9c:0c:3c:7b:21:97:0f:57:eb:93:c9:8f:b0:
         8f:9d:d1:2b:da:76:98:4f:fb:e9:52:9f:37:19:a4:6b:f3:b8:
         16:9c:3b:f2:d1:51:63:a0:74:83:c6:89:2e:34:6b:bb:8b:17:
         d1:3e:12:3d:43:9a:59:82:52:14:7d:c1:a5:20:a7:5b:8b:a9:
         0a:40:7a:c1

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06