root_ca_3.crt: CN=Hongkong Post Root CA 3,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK

Page content

CA Certificate Basic Information

This certificate is intermediate certificate used for the issuance of other certificates.

  • Certificate download URL: http://www1.hongkongpost.gov.hk/root/root_ca_3.crt (DER format)
  • Serial number: 464721447274176181814240747386970568663453171430
  • SHA-1 Fingerprint: 97fc47e174e2aa5332321dcff6077a19f04387f0
  • SHA-1 Fingerprint: 97:fc:47:e1:74:e2:aa:53:32:32:1d:cf:f6:07:7a:19:f0:43:87:f0
  • SHA-256 Fingerprint: 176aebf2972bd6f47179ede3de63848b1543b45ae2954bea45185b152537b9c4
  • SHA-256 Fingerprint: 17:6a:eb:f2:97:2b:d6:f4:71:79:ed:e3:de:63:84:8b:15:43:b4:5a:e2:95:4b:ea:45:18:5b:15:25:37:b9:c4
  • Signature hash algorithm: sha256
  • Subject: CN=Hongkong Post Root CA 3,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK
  • Not valid before: 2017-08-12 03:09:02
  • Not valid after: 2023-05-15 04:52:29
  • Issuer:

Download certificate through curl:

curl -sSL http://www1.hongkongpost.gov.hk/root/root_ca_3.crt --output cert.crt

Download certificate through wget:

wget -q http://www1.hongkongpost.gov.hk/root/root_ca_3.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:66:d4:95:f1:1e:fd:3f:db:50:88:cd:1e:8b:cc:e1:80:e8:7e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1
        Validity
            Not Before: Aug 12 03:09:02 2017 GMT
            Not After : May 15 04:52:29 2023 GMT
        Subject: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:b3:88:d7:ea:ce:0f:20:4e:be:e6:d6:03:6d:ee:
                    59:fc:c2:57:df:29:68:a1:83:0e:3e:68:c7:68:58:
                    9c:1c:60:4b:89:43:0c:b9:d4:15:b2:ee:c1:4e:75:
                    e9:b5:a7:ef:e5:e9:35:99:e4:cc:1c:e7:4b:5f:8d:
                    33:30:20:33:53:d9:a6:bb:d5:3e:13:8e:e9:1f:87:
                    49:ad:50:2d:50:ca:18:be:01:58:a2:13:70:96:bb:
                    89:88:56:80:5c:f8:bd:2c:3c:e1:4c:57:88:bb:d3:
                    b9:95:ef:cb:c7:f6:da:31:74:28:a6:e6:54:89:f5:
                    41:31:ca:e5:26:1a:cd:82:e0:70:da:3b:29:bb:d5:
                    03:f5:99:ba:55:f5:64:d1:60:0e:b3:89:49:b8:8a:
                    2f:05:d2:84:45:28:7c:8f:68:50:12:78:fc:0b:b5:
                    53:cb:c2:98:1c:84:a3:9e:b0:be:23:a4:da:dc:c8:
                    2b:1e:da:6e:45:1e:89:98:da:f9:00:2e:06:e9:0c:
                    3b:70:d5:50:25:88:99:cb:cd:73:60:f7:d5:ff:35:
                    67:c5:a1:bc:5e:ab:cd:4a:b8:45:eb:c8:68:1e:0d:
                    0d:14:46:12:e3:d2:64:62:8a:42:98:bc:b4:c6:08:
                    08:f8:fd:a8:4c:64:9c:76:01:bd:2f:a9:6c:33:0f:
                    d8:3f:28:b8:3c:69:01:42:86:7e:69:c1:c9:06:ca:
                    e5:7a:46:65:e9:c2:d6:50:41:2e:3f:b7:e4:ed:6c:
                    d7:bf:26:01:11:a2:16:29:4a:6b:34:06:90:ec:13:
                    d2:b6:fb:6a:76:d2:3c:ed:f0:d6:2d:dd:e1:15:ec:
                    a3:9b:2f:2c:c9:3e:2b:e4:69:3b:ff:72:25:b1:36:
                    86:5b:c7:7f:6b:8b:55:1b:4a:c5:20:61:3d:ae:cb:
                    50:e1:08:3a:be:b0:8f:63:41:53:30:08:59:3c:98:
                    1d:77:ba:63:91:7a:ca:10:50:60:bf:f0:d7:bc:95:
                    87:8f:97:c5:fe:97:6a:01:94:a3:7c:5b:85:1d:2a:
                    39:3a:d0:54:a1:d1:39:71:9d:fd:21:f9:b5:7b:f0:
                    e2:e0:02:8f:6e:96:24:25:2c:a0:1e:2c:a8:c4:89:
                    a7:ef:ed:99:06:2f:b6:0a:4c:4f:db:a2:cc:37:1a:
                    af:47:85:2d:8a:5f:c4:34:34:4c:00:fd:18:93:67:
                    13:d1:37:e6:48:b4:8b:06:c5:57:7b:19:86:0a:79:
                    cb:00:c9:52:af:42:ff:37:8f:e1:a3:1e:7a:3d:50:
                    ab:63:06:e7:15:b5:3f:b6:45:37:94:37:b1:7e:f2:
                    48:c3:7f:c5:75:fe:97:8d:45:8f:1a:a7:1a:72:28:
                    1a:40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                CA Issuers - URI:http://www1.hongkongpost.gov.hk/root/root_ca_1.crt
                OCSP - URI:http://ocsp1.hongkongpost.gov.hk

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: www.hongkongpost.gov.hk

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Authority Key Identifier: 
                keyid:06:90:0C:E4:71:DD:4C:2C:A7:64:69:BB:51:D0:DD:7E:42:64:44:21

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl1.hongkongpost.gov.hk/crl/RootCA1ARL.crl

            X509v3 Subject Key Identifier: 
                17:9D:CD:1E:8B:D6:39:2B:70:D3:5C:D4:A0:B8:1F:B0:00:FC:C5:61
    Signature Algorithm: sha256WithRSAEncryption
         1c:34:65:6b:ac:c6:05:33:94:92:95:1c:4d:ba:eb:d1:cf:85:
         b0:ef:f2:88:23:f6:5a:88:7a:c4:9a:ef:86:27:b7:a3:5d:2d:
         ba:f3:a6:a6:46:cb:77:7b:ea:28:88:26:15:fe:5c:a4:69:06:
         19:70:be:cc:33:0b:bf:ca:ab:09:0f:a1:c1:6d:63:06:e0:f8:
         c1:20:a4:83:02:95:76:72:2f:1d:1c:29:b2:a9:fc:7e:24:8e:
         9a:49:78:05:f3:53:0f:98:82:03:f8:26:49:e1:09:66:a4:8f:
         ad:05:5d:84:52:6f:a4:df:ba:91:d6:84:ef:a5:d9:13:b5:e3:
         d5:5b:8e:b3:f3:e5:e9:f3:fb:91:89:6c:6b:fd:6a:b8:c2:bb:
         fb:45:32:94:47:3c:a9:ce:6c:c1:2f:55:53:26:cc:3b:24:28:
         12:7f:40:30:62:db:12:ee:98:b5:77:50:73:ef:5e:a6:3b:e9:
         a6:95:78:c6:7a:98:d7:5e:a8:21:5e:31:ba:5b:43:2a:3c:3c:
         34:e2:70:7f:14:e3:bf:91:2a:df:f1:ef:ad:bb:ee:70:dc:bd:
         f6:2f:4f:3e:78:a0:08:ca:53:af:ea:b1:47:b7:50:34:19:2c:
         e0:24:fa:63:af:d7:59:68:3f:2f:99:d1:df:53:14:87:df:be:
         95:7a:d7:d7

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIUUWbUlfEe/T/bUIjNHovM4YDofuYwDQYJKoZIhvcNAQEL
BQAwRzELMAkGA1UEBhMCSEsxFjAUBgNVBAoTDUhvbmdrb25nIFBvc3QxIDAeBgNV
BAMTF0hvbmdrb25nIFBvc3QgUm9vdCBDQSAxMB4XDTE3MDgxMjAzMDkwMloXDTIz
MDUxNTA0NTIyOVowbzELMAkGA1UEBhMCSEsxEjAQBgNVBAgTCUhvbmcgS29uZzES
MBAGA1UEBxMJSG9uZyBLb25nMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYD
VQQDExdIb25na29uZyBQb3N0IFJvb3QgQ0EgMzCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBALOI1+rODyBOvubWA23uWfzCV98paKGDDj5ox2hYnBxgS4lD
DLnUFbLuwU516bWn7+XpNZnkzBznS1+NMzAgM1PZprvVPhOO6R+HSa1QLVDKGL4B
WKITcJa7iYhWgFz4vSw84UxXiLvTuZXvy8f22jF0KKbmVIn1QTHK5SYazYLgcNo7
KbvVA/WZulX1ZNFgDrOJSbiKLwXShEUofI9oUBJ4/Au1U8vCmByEo56wviOk2tzI
Kx7abkUeiZja+QAuBukMO3DVUCWImcvNc2D31f81Z8WhvF6rzUq4RevIaB4NDRRG
EuPSZGKKQpi8tMYICPj9qExknHYBvS+pbDMP2D8ouDxpAUKGfmnByQbK5XpGZenC
1lBBLj+35O1s178mARGiFilKazQGkOwT0rb7anbSPO3w1i3d4RXso5svLMk+K+Rp
O/9yJbE2hlvHf2uLVRtKxSBhPa7LUOEIOr6wj2NBUzAIWTyYHXe6Y5F6yhBQYL/w
17yVh4+Xxf6XagGUo3xbhR0qOTrQVKHROXGd/SH5tXvw4uACj26WJCUsoB4sqMSJ
p+/tmQYvtgpMT9uizDcar0eFLYpfxDQ0TAD9GJNnE9E35ki0iwbFV3sZhgp5ywDJ
Uq9C/zeP4aMeej1Qq2MG5xW1P7ZFN5Q3sX7ySMN/xXX+l41FjxqnGnIoGkAPAgMB
AAGjggFiMIIBXjAPBgNVHRMBAf8EBTADAQH/MHwGCCsGAQUFBwEBBHAwbjA+Bggr
BgEFBQcwAoYyaHR0cDovL3d3dzEuaG9uZ2tvbmdwb3N0Lmdvdi5oay9yb290L3Jv
b3RfY2FfMS5jcnQwLAYIKwYBBQUHMAGGIGh0dHA6Ly9vY3NwMS5ob25na29uZ3Bv
c3QuZ292LmhrMDgGA1UdIAQxMC8wLQYEVR0gADAlMCMGCCsGAQUFBwIBFhd3d3cu
aG9uZ2tvbmdwb3N0Lmdvdi5oazAOBgNVHQ8BAf8EBAMCAQYwHwYDVR0jBBgwFoAU
BpAM5HHdTCynZGm7UdDdfkJkRCEwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2Ny
bDEuaG9uZ2tvbmdwb3N0Lmdvdi5oay9jcmwvUm9vdENBMUFSTC5jcmwwHQYDVR0O
BBYEFBedzR6L1jkrcNNc1KC4H7AA/MVhMA0GCSqGSIb3DQEBCwUAA4IBAQAcNGVr
rMYFM5SSlRxNuuvRz4Ww7/KII/ZaiHrEmu+GJ7ejXS2686amRst3e+ooiCYV/lyk
aQYZcL7MMwu/yqsJD6HBbWMG4PjBIKSDApV2ci8dHCmyqfx+JI6aSXgF81MPmIID
+CZJ4QlmpI+tBV2EUm+k37qR1oTvpdkTtePVW46z8+Xp8/uRiWxr/Wq4wrv7RTKU
RzypzmzBL1VTJsw7JCgSf0AwYtsS7pi1d1Bz716mO+mmlXjGepjXXqghXjG6W0Mq
PDw04nB/FOO/kSrf8e+tu+5w3L32L08+eKAIylOv6rFHt1A0GSzgJPpjr9dZaD8v
mdHfUxSH376VetfX
-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26