ecert_ca_1-15_pem.crt: CN=Hongkong Post e-Cert CA 1 - 15,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Intermediate Certificate, Expiring 2023-05-15) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://www1.ecert.gov.hk/root/ecert_ca_1-15_pem.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www1.ecert.gov.hk/root/ecert_ca_1-15_pem.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1285 (0x505)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1
        Validity
            Not Before: Jul  4 02:53:48 2015 GMT
            Not After : May 15 04:52:29 2023 GMT
        Subject: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post e-Cert CA 1 - 15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:54:8b:0c:f7:2b:10:f0:8d:a1:f6:57:ad:
                    c5:04:c4:45:6c:fb:35:1a:73:00:d0:cf:5d:32:db:
                    55:75:bd:47:58:af:17:46:4f:bb:87:77:e4:78:a2:
                    9f:93:2e:f1:dd:3b:95:cd:d9:93:ab:45:3a:09:18:
                    99:ba:79:9f:4d:6a:dc:92:30:8a:e8:fa:a9:3b:f8:
                    3d:66:e5:e5:9c:91:62:9f:7f:8c:9e:95:88:91:8c:
                    4c:e9:eb:59:f1:03:4c:cd:32:b4:9c:d9:91:88:48:
                    d0:00:e5:ac:cc:93:7a:86:4c:e1:61:ff:75:56:32:
                    ad:cf:b9:ab:ce:4d:a1:2c:37:6e:ab:51:ea:97:2b:
                    95:e1:08:8e:14:3b:1b:a5:b5:41:52:4e:a0:58:0c:
                    d2:ff:2f:9e:d1:fd:3c:5a:8f:57:b1:a5:b2:51:b6:
                    d0:b0:37:6b:8a:dc:dc:38:96:73:c5:dc:3e:2e:ce:
                    72:6b:9a:41:4f:fd:88:61:8c:85:3f:2a:14:89:b9:
                    e6:14:0a:f6:5a:b9:ca:c0:c6:b7:f5:69:08:fa:f9:
                    70:c6:09:ba:35:88:9f:b5:c6:c2:87:d6:4c:2d:42:
                    a5:87:1f:fd:b7:b7:8e:2d:69:ba:fa:60:b4:f5:35:
                    11:2f:fa:97:06:93:44:b5:c9:0e:04:0e:65:50:6b:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                CA Issuers - URI:http://www1.hongkongpost.gov.hk/root/root_ca_1.crt
                OCSP - URI:http://ocsp1.hongkongpost.gov.hk

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: www.hongkongpost.gov.hk

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Authority Key Identifier: 
                DirName:/C=HK/O=Hongkong Post/CN=Hongkong Post Root CA 1
                serial:03:E8

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl1.hongkongpost.gov.hk/crl/RootCA1ARL.crl

            X509v3 Subject Key Identifier: 
                4C:EF:77:AD:23:4A:D6:45:48:28:D7:98:2C:FE:21:1A:65:F4:4A:1D
    Signature Algorithm: sha256WithRSAEncryption
         6f:e7:12:34:0c:3e:f5:bf:57:2c:e9:eb:f1:13:1b:6d:07:2a:
         cf:09:fc:6d:21:76:0b:2d:40:33:44:a0:5e:db:36:e4:f8:3f:
         81:3c:df:15:aa:86:f0:66:18:16:62:31:2b:3b:fd:71:94:1a:
         50:0e:da:16:2a:89:1f:01:ef:56:e3:f8:36:fd:36:30:b2:6d:
         87:1b:28:ee:db:9f:63:f3:41:4d:3c:71:da:7f:52:9a:ee:20:
         06:e9:2d:32:4c:7f:dd:9f:8d:99:fe:2e:c9:02:ba:30:94:2c:
         d5:8d:ef:2d:7a:82:a4:75:ea:90:58:21:fb:1a:d7:9d:5e:a3:
         6b:03:0b:e3:94:fd:dd:f1:aa:57:6c:55:66:46:2a:70:09:35:
         55:ac:8c:8d:5f:21:ec:40:ec:80:a4:7b:37:db:7a:b6:61:8f:
         45:f2:a0:33:23:81:39:7d:bc:07:b5:f2:4c:f6:f1:d1:03:f0:
         f2:5c:b3:64:95:10:23:b7:0c:40:54:59:d1:09:74:fc:db:ed:
         c9:77:8a:94:97:aa:52:6a:b1:66:ee:d0:63:5d:5e:44:38:6d:
         9b:6c:8a:62:ce:df:bc:8c:9a:f2:7c:09:90:43:80:11:63:99:
         72:76:33:f7:5a:16:70:bd:16:ec:24:35:df:85:c8:cb:f0:24:
         ba:24:17:c0

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06