TrustAsiaECCDVTLSCAG2.crt: CN=TrustAsia ECC DV TLS CA G2,O=TrustAsia Technologies, Inc.,C=CN

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://crt.trust-provider.cn/TrustAsiaECCDVTLSCAG2.crt (DER format)
  • Serial number: 279277416845205507684913506772718254861
  • SHA-1 Fingerprint: b6bf99083a40e79bb0759fa01ebc6a1ea4bd133c
  • SHA-1 Fingerprint: b6:bf:99:08:3a:40:e7:9b:b0:75:9f:a0:1e:bc:6a:1e:a4:bd:13:3c
  • SHA-256 Fingerprint: 5251e2a5b3a42021667994b04e195b693b9b71b752267c44dc310a77979bdc00
  • SHA-256 Fingerprint: 52:51:e2:a5:b3:a4:20:21:66:79:94:b0:4e:19:5b:69:3b:9b:71:b7:52:26:7c:44:dc:31:0a:77:97:9b:dc:00
  • Signature hash algorithm: sha256
  • Subject: CN=TrustAsia ECC DV TLS CA G2,O=TrustAsia Technologies, Inc.,C=CN
  • Not valid before: 2022-01-10 00:00:00
  • Not valid after: 2028-12-31 23:59:59
  • Issuer:
    • Issuer name: CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://crt.trust-provider.cn/TrustAsiaECCDVTLSCAG2.crt --output cert.crt

Download certificate through wget:

wget -q http://crt.trust-provider.cn/TrustAsiaECCDVTLSCAG2.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d2:1a:df:bd:c3:c4:57:72:bd:f6:98:b2:ba:d8:fb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
        Validity
            Not Before: Jan 10 00:00:00 2022 GMT
            Not After : Dec 31 23:59:59 2028 GMT
        Subject: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia ECC DV TLS CA G2
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:a0:c5:a7:e8:82:30:10:e9:ea:70:13:0b:14:d9:
                    da:85:ba:0d:bf:8e:b4:89:d8:7f:99:cd:3a:a5:c2:
                    4b:c2:37:ac:be:61:e5:c4:f5:1d:a8:63:95:dd:94:
                    a2:ea:d7:c6:49:ba:f7:06:3e:38:04:af:33:72:e2:
                    9d:8f:5c:5c:d9
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4

            X509v3 Subject Key Identifier: 
                01:A6:B0:FD:96:C7:4A:A8:69:22:B2:11:9E:60:DB:6A:34:C6:14:52
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.49
                Policy: 2.23.140.1.2.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/AAACertificateServices.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha256WithRSAEncryption
         63:70:42:49:41:60:4e:f3:db:83:98:cc:78:97:64:20:33:a4:
         9c:4d:5c:e4:b6:8a:79:e8:1f:02:a7:ef:84:6a:c9:e1:b5:6d:
         c9:67:9a:6d:3e:03:ab:41:84:8e:66:42:b0:17:b4:b5:6e:15:
         7a:f4:82:88:f3:19:b5:fd:9f:cd:c6:1e:17:73:14:57:52:59:
         6c:80:cb:2d:26:7b:c0:ad:2b:ed:4b:df:33:23:24:3a:df:eb:
         0a:06:e4:97:50:cf:2b:b6:11:f6:eb:39:66:32:7f:04:36:87:
         e5:88:2a:90:1c:99:5a:d0:43:6e:42:9d:84:fd:ed:41:9d:89:
         51:50:8c:b8:19:43:e7:e3:d4:ce:b4:9d:4b:15:9e:3e:b0:ee:
         aa:dc:d2:82:37:d0:4c:48:9b:00:28:3b:82:4a:54:e5:5d:20:
         d4:e6:05:ba:15:32:36:d3:80:d0:82:39:ad:b2:75:95:b2:21:
         8b:48:cd:75:e9:d8:af:32:16:23:fc:56:36:33:6e:db:f9:57:
         3d:6d:2d:40:09:c9:8c:81:17:db:ec:a1:3e:18:0d:12:8b:4d:
         ce:1b:85:2c:63:fe:e2:47:4a:6a:7b:a2:72:b3:2e:6f:b3:4d:
         23:00:e7:18:55:4d:c2:c7:7e:f9:bc:df:da:a7:8a:0d:fb:4a:
         b1:61:e5:16

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26