GeoTrustEVRSACA2018.crt: CN=GeoTrust EV RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt (DER format)
  • Serial number: 5311377080715406728283424638638659411
  • SHA-1 Fingerprint: a399046417b67e320d3efa69d7dce6b8bfe8a9f2
  • SHA-1 Fingerprint: a3:99:04:64:17:b6:7e:32:0d:3e:fa:69:d7:dc:e6:b8:bf:e8:a9:f2
  • SHA-256 Fingerprint: 185c0ae470423b9d4678a7c1055b5b48d90705505b794e215c063851336981f4
  • SHA-256 Fingerprint: 18:5c:0a:e4:70:42:3b:9d:46:78:a7:c1:05:5b:5b:48:d9:07:05:50:5b:79:4e:21:5c:06:38:51:33:69:81:f4
  • Signature hash algorithm: sha256
  • Subject: CN=GeoTrust EV RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US
  • Not valid before: 2017-11-06 12:22:46
  • Not valid after: 2027-11-06 12:22:46
  • Issuer:
    • Issuer name: CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fe:ef:1b:b5:b6:48:34:9a:20:95:0f:8b:c6:97:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
        Validity
            Not Before: Nov  6 12:22:46 2017 GMT
            Not After : Nov  6 12:22:46 2027 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust EV RSA CA 2018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:46:6d:2f:2a:8c:9b:01:6d:78:e2:eb:87:
                    e7:f2:36:ca:3c:3c:3a:76:c1:ae:b4:57:3c:c9:53:
                    9d:17:9e:1e:6e:d0:9d:de:9d:7a:2c:79:71:11:87:
                    2b:be:33:eb:70:5c:33:2e:df:79:6e:ab:2e:00:24:
                    ee:f2:2c:ef:b2:89:0c:3c:df:11:86:1e:67:2d:ee:
                    78:9f:6d:fe:f1:18:ea:42:f0:d2:cf:d8:fc:f8:6e:
                    af:c9:7d:6f:81:58:75:54:4b:68:f6:99:f3:ab:55:
                    44:8e:68:5b:b3:8e:bf:66:d3:c7:87:87:45:20:76:
                    f9:a1:52:0c:2f:a2:fe:84:ec:4f:03:6f:8f:b9:31:
                    fd:f2:17:62:94:68:d1:c7:09:23:90:3e:63:7a:af:
                    0e:ef:ef:d3:eb:a9:a4:88:f6:eb:1c:d6:d6:e3:13:
                    a6:88:21:c0:db:47:63:91:84:c2:2e:6e:27:71:fb:
                    8a:63:e2:e3:1a:7f:f6:ed:11:e5:ff:ca:47:ec:76:
                    0a:89:61:f2:fe:2a:4e:0e:9b:02:fd:bc:9e:96:a5:
                    67:bd:dd:83:2e:d0:4f:f1:08:0f:2b:80:af:0a:53:
                    90:fd:45:91:29:cd:e8:d3:56:15:51:18:8f:9f:b9:
                    d7:50:03:c5:38:69:5e:8f:da:c0:ab:46:84:b6:91:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CA:92:67:52:61:DE:AE:FC:BA:22:2B:7F:1C:87:4C:25:FB:6F:99:58
            X509v3 Authority Key Identifier: 
                keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         c2:8e:7b:3d:bb:f4:fa:b1:95:a2:e1:0e:2e:31:bd:08:f9:06:
         ba:62:74:7c:74:b0:10:59:0d:6b:42:9e:fb:c0:6d:33:ac:64:
         d3:91:1a:3b:4b:91:04:78:20:5a:19:66:df:10:88:94:63:3e:
         c2:dd:c3:38:f1:e5:0f:71:8e:df:97:cb:c6:22:5e:8f:09:09:
         6a:81:bf:b7:9e:1b:39:9b:f5:59:f7:c0:c7:fb:78:7d:b6:2b:
         f3:36:3d:ca:43:1b:f0:20:36:3c:cb:f6:76:c9:66:1a:48:f8:
         e1:db:93:8a:21:88:3f:e8:a2:f5:fd:87:21:46:d8:db:34:cb:
         cd:2a:19:cb:5f:7e:8a:6c:07:37:d3:33:11:c2:e5:3c:0d:19:
         6c:9b:3e:0e:94:00:78:2f:42:f8:a2:b4:ea:4f:94:c9:1d:3c:
         47:2e:b5:2a:ac:bc:41:5c:2f:6c:7d:7f:b6:5b:14:83:f6:21:
         ed:04:72:e5:4d:81:7e:a3:16:3e:c4:29:f2:85:1e:7f:1a:a4:
         97:6d:1a:15:09:66:ae:26:69:b9:4d:9b:ed:e2:c4:f9:1d:56:
         be:5f:ef:56:9a:14:5b:df:2a:2f:36:e1:2d:76:3d:b2:ec:fa:
         4e:62:4a:be:ee:13:7b:5a:40:1d:b2:13:5b:a6:3a:cf:4e:27:
         85:fd:62:f9

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26