cloudssleccsha2g3.crt: CN=GlobalSign ECC CloudSSL CA - SHA384 - G3,O=GlobalSign nv-sa,C=BE

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://secure.globalsign.com/cacert/cloudssleccsha2g3.crt (DER format)
  • Serial number: 149310462918105801945102795587
  • SHA-1 Fingerprint: a3fb3bcf86459f2f557da20285f786cecf952059
  • SHA-1 Fingerprint: a3:fb:3b:cf:86:45:9f:2f:55:7d:a2:02:85:f7:86:ce:cf:95:20:59
  • SHA-256 Fingerprint: b0cd6ae7b9e20ec5f830fee01f666d5d90e6e229d06bc46a30accedfec889648
  • SHA-256 Fingerprint: b0:cd:6a:e7:b9:e2:0e:c5:f8:30:fe:e0:1f:66:6d:5d:90:e6:e2:29:d0:6b:c4:6a:30:ac:ce:df:ec:88:96:48
  • Signature hash algorithm: sha384
  • Subject: CN=GlobalSign ECC CloudSSL CA - SHA384 - G3,O=GlobalSign nv-sa,C=BE
  • Not valid before: 2017-06-21 00:00:00
  • Not valid after: 2027-06-21 00:00:00
  • Issuer:
    • Issuer name: CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R3
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://secure.globalsign.com/cacert/cloudssleccsha2g3.crt --output cert.crt

Download certificate through wget:

wget -q http://secure.globalsign.com/cacert/cloudssleccsha2g3.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e2:72:b8:5d:88:05:70:d4:fd:bd:c3:43
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
        Validity
            Not Before: Jun 21 00:00:00 2017 GMT
            Not After : Jun 21 00:00:00 2027 GMT
        Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign ECC CloudSSL CA - SHA384 - G3
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:f3:ba:6d:44:96:91:82:4c:63:e2:10:34:82:47:
                    c0:d2:4d:9e:4f:1f:fd:a4:cf:cc:93:fe:6f:18:e0:
                    bc:81:d3:24:26:6f:70:a3:f9:ce:23:6e:f4:5f:81:
                    b2:64:99:30:13:c1:cb:92:4d:53:da:54:d2:51:67:
                    db:f0:d0:8c:5d:af:55:27:09:12:1f:22:73:d4:99:
                    e5:6b:af:42:cd:ce:e5:c1:b3:c2:d9:14:36:58:6a:
                    3d:79:69:a9:29:9c:f5
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                77:32:2A:83:8A:CB:60:F8:BB:1B:46:A9:28:27:97:32:0F:FC:DD:5F
            X509v3 Authority Key Identifier: 
                keyid:8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC

            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/rootr3

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.com/root-r3.crl

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                Policy: 2.23.140.1.2.2
                  CPS: https://www.globalsign.com/repository/

    Signature Algorithm: sha384WithRSAEncryption
         81:bb:b9:96:03:5e:f0:20:41:a0:0e:5e:e0:d0:a5:ac:fc:b0:
         7f:cd:c4:39:f1:0d:bb:6c:97:80:bc:02:43:86:f1:23:bc:aa:
         39:36:aa:86:24:4c:f5:dd:b2:ff:0c:9e:2f:d2:0f:4d:92:79:
         06:17:38:f0:d8:2a:d0:23:6b:34:f1:f5:b7:cd:87:3e:6a:c1:
         b7:67:2c:74:98:80:91:30:d3:4a:d8:8d:2d:c9:43:db:27:d8:
         f9:47:8b:f5:ff:3d:9f:bd:4f:5d:86:ef:9c:37:e1:60:3f:e3:
         c6:0a:a0:a4:c2:ed:16:7b:99:81:b3:66:b1:32:6c:1e:c4:36:
         a2:2d:16:73:37:6f:45:b1:f2:a2:6f:31:e6:e4:c4:09:e7:60:
         c9:11:75:28:f3:76:2d:44:9a:d2:34:c3:31:7b:8c:05:2f:ef:
         cb:2c:44:f8:22:93:59:97:3f:eb:4f:b1:7f:74:7c:38:46:9f:
         36:1e:26:13:04:a8:51:9a:0c:49:84:dd:75:c7:3f:dd:6d:ed:
         a2:39:b9:61:d4:7e:ff:41:74:8e:21:71:93:d2:77:1b:60:43:
         0a:c0:a8:59:69:bb:d9:1f:e6:e9:0a:61:b6:ca:b3:59:2d:22:
         d1:88:04:68:8c:08:03:58:3f:6e:1f:0b:c8:8a:c0:41:a2:5f:
         cc:01:70:0c

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26