SectigoRSAProSeriesSecureServerCA.crt: CN=Sectigo RSA Pro Series Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB (Intermediate Certificate, Expiring 2030-12-31) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://crt.sectigo.com/SectigoRSAProSeriesSecureServerCA.crt" --output cert.crt

Download certificate through wget:

wget -q "http://crt.sectigo.com/SectigoRSAProSeriesSecureServerCA.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c7:ce:59:37:8e:0e:cd:e8:71:ec:d6:a7:8c:61:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
        Validity
            Not Before: Nov  6 00:00:00 2018 GMT
            Not After : Dec 31 23:59:59 2030 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Pro Series Secure Server CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:18:5e:82:f0:97:66:f8:42:15:a7:5f:19:
                    d8:bc:57:23:08:60:1e:c0:32:36:89:3d:fd:15:76:
                    2f:49:a8:8a:fb:50:34:e4:40:66:c5:71:91:b6:d3:
                    a7:97:c3:8b:8c:1d:bd:22:64:23:5a:13:27:3f:ce:
                    8c:87:cb:15:fc:27:f1:05:49:e7:a4:32:42:e3:48:
                    78:7a:a1:c4:a5:7f:68:b5:62:e3:2d:33:6c:29:45:
                    c3:e1:5f:78:77:9d:96:ca:3b:f9:dc:3c:2f:dd:4f:
                    d6:78:db:78:c6:03:5b:80:f2:64:01:28:a8:19:46:
                    8e:e6:de:ac:01:4c:16:31:85:80:e1:a9:fd:00:ab:
                    a9:83:76:f2:73:94:84:39:61:ff:07:8a:a6:e0:00:
                    28:e7:11:9c:ce:8e:1f:24:40:8f:62:f8:08:b7:d1:
                    0a:0d:65:29:de:d5:ca:08:ab:31:ab:10:b6:87:8a:
                    da:2a:89:13:b6:b0:27:28:26:82:c1:aa:b2:64:9c:
                    cb:bb:d6:57:2c:e8:f2:1d:c4:28:5f:0a:cc:33:23:
                    8e:f5:6e:43:1f:66:a8:b3:a3:49:12:3c:39:0c:c8:
                    72:fc:8d:13:b6:d1:ea:16:52:b0:5d:57:65:e4:be:
                    30:31:56:52:a6:9f:ee:d3:20:8a:40:ff:86:4b:82:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4

            X509v3 Subject Key Identifier: 
                81:C5:BA:1D:B3:02:7D:C1:BF:56:F1:68:0C:E8:07:86:9C:7A:80:C6
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication, 2.16.840.1.113741.1.2.3
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                Policy: 2.23.140.1.2.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/AAACertificateServices.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha256WithRSAEncryption
         23:f1:8e:ae:97:09:aa:5f:28:b7:86:e2:0d:c8:54:b9:3f:5e:
         90:1b:26:ae:00:9a:50:d1:04:52:ec:b1:34:ac:5e:a0:93:ea:
         9d:2a:bb:8e:51:49:f3:b5:d0:1e:a6:0d:d2:4f:1c:f2:09:93:
         f8:7b:09:22:e1:ab:15:93:86:71:5d:6f:d7:43:89:90:6e:f7:
         39:6c:69:3a:d3:20:29:f0:3b:a6:c7:e9:78:5f:86:b0:71:49:
         74:a4:df:cb:df:b9:ad:40:6a:5e:e4:c0:02:d0:09:96:de:2f:
         87:f9:45:d0:b5:db:72:a5:f0:8e:7e:0c:82:d1:af:23:e9:bd:
         4d:58:58:2c:4d:02:b5:97:fc:84:65:cb:80:4f:60:43:25:c9:
         76:7a:1c:9e:ef:eb:b7:52:a7:cc:d7:92:6e:78:07:14:07:21:
         41:01:2a:24:29:86:1b:0d:53:ae:3f:5d:07:0c:47:c9:07:43:
         97:c7:c6:50:8c:cc:9b:07:ec:2d:3c:c4:df:85:85:07:34:b3:
         71:7b:37:ed:01:99:3f:20:da:ed:c0:ba:d4:ec:e5:c0:39:1e:
         6d:33:93:07:32:ba:1d:b9:c0:8a:fb:65:45:2b:89:81:f9:34:
         f3:16:89:1d:1d:09:df:8e:ff:16:c7:28:0e:9e:a8:a2:a4:8a:
         a1:56:fc:01

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06