sf_evcs-g2.crt: CN=Starfield Secure Extended Validation Code Signing CA - G2,O=Starfield Technologies, LLC,L=Scottsdale,ST=Arizona,C=US (Intermediate Certificate, Expiring 2035-05-01) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://certs.godaddy.com/repository/sf_evcs-g2.crt" --output cert.crt

Download certificate through wget:

wget -q "https://certs.godaddy.com/repository/sf_evcs-g2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538903896582080455 (0x77a923d1bd947c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
        Validity
            Not Before: May  1 07:00:00 2015 GMT
            Not After : May  1 07:00:00 2035 GMT
        Subject: C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, LLC, CN=Starfield Secure Extended Validation Code Signing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f4:ba:98:e5:2c:44:ba:77:35:c1:fa:1c:26:
                    eb:5f:c5:c9:63:96:37:e3:4a:45:f1:fd:f3:23:98:
                    37:c8:e1:24:e6:e3:3a:29:5f:c8:62:f0:9a:3d:34:
                    96:24:8f:40:ff:37:49:6f:dd:d9:f2:35:f6:62:9a:
                    3d:c2:3a:54:cb:4d:26:64:ad:1e:4c:24:e6:3c:49:
                    9a:19:c8:79:0c:e8:98:9e:4c:84:67:2a:ce:19:18:
                    28:76:7b:7a:b0:f2:c8:40:0b:f3:ee:e4:44:24:aa:
                    fe:8a:f6:1e:c3:f4:d3:92:5c:2e:e3:ed:79:0c:11:
                    cc:31:00:94:a8:dd:50:57:0c:45:b8:95:00:29:99:
                    5a:af:6c:d1:08:8c:a3:e7:6c:32:eb:f5:b6:c5:d1:
                    90:ee:3d:eb:0f:e1:03:d2:5e:ed:ef:ea:78:11:76:
                    bc:38:8b:be:23:32:d8:72:b0:33:db:1a:72:71:59:
                    9f:9e:51:b8:62:5b:a9:55:5d:d3:fd:19:e7:2c:41:
                    c6:6f:fc:2a:1f:4d:e5:1c:1d:b8:b8:e0:8f:ec:dd:
                    30:cd:49:8e:93:83:90:d6:22:dd:1e:3b:f3:3a:9e:
                    46:ec:06:05:dc:8d:e8:6c:48:c2:56:e7:f9:7c:9a:
                    75:93:37:3d:2c:be:11:cd:d0:f5:43:88:80:37:ce:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing, 1.3.6.1.4.1.311.61.1.1
            X509v3 Subject Key Identifier: 
                23:4F:FE:83:10:9E:8D:41:88:A6:BA:2B:D3:F9:99:4A:C3:42:60:DF
            X509v3 Authority Key Identifier: 
                keyid:7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27

            Authority Information Access: 
                OCSP - URI:http://ocsp.starfieldtech.com/

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.starfieldtech.com/repository/sfroot-g2.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://crl.starfieldtech.com/repository/

    Signature Algorithm: sha256WithRSAEncryption
         8b:cd:cd:9a:56:c7:84:73:7f:5c:29:74:b7:21:ab:de:55:e2:
         68:fe:aa:e6:6f:b5:e6:da:5c:15:bc:52:ed:28:c0:be:8d:79:
         42:29:0a:0e:f2:9a:14:7e:ff:f6:5c:4b:6e:41:2f:4c:3c:34:
         a2:a1:d0:fd:c6:48:96:23:69:5c:b2:5f:ab:d9:95:ec:73:c4:
         b6:a4:2a:29:e4:f2:c3:51:e5:ee:a7:bc:10:b3:bf:54:6d:e5:
         5a:7f:34:68:cb:b7:38:44:d3:7e:53:ab:0e:47:02:e6:22:3f:
         93:62:4e:11:46:d0:30:e5:c2:93:75:96:a4:1f:2b:ee:58:24:
         58:54:0d:ab:82:0f:a6:e0:af:b0:d8:7d:23:a5:e2:02:cc:89:
         28:bd:2d:60:01:ec:35:b5:c1:ba:77:89:ef:71:20:3f:7a:6d:
         a6:59:93:7c:34:b4:5f:4b:2e:23:1f:78:48:09:e2:c7:c1:a7:
         92:1c:4e:e0:a7:41:c1:d1:98:37:55:18:c3:c0:6f:dd:e2:2e:
         e3:97:f8:df:65:e2:a9:bf:66:74:b8:0f:7a:3b:48:8a:15:33:
         4f:94:ea:6b:fc:bc:de:f5:89:1f:ad:48:aa:c4:1f:48:73:d0:
         b4:10:05:90:0c:de:de:f1:51:55:ab:8c:80:78:35:2d:21:01:
         aa:0d:be:db

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06