GeoTrustTLSECCCAG1.crt: CN=GeoTrust TLS ECC CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2027-11-02) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://cacerts.geotrust.com/GeoTrustTLSECCCAG1.crt" --output cert.crt

Download certificate through wget:

wget -q "http://cacerts.geotrust.com/GeoTrustTLSECCCAG1.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4a:3f:f9:47:be:39:c1:99:ce:b8:06:96:1e:51:6d
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
        Validity
            Not Before: Nov  2 12:59:38 2017 GMT
            Not After : Nov  2 12:59:38 2027 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS ECC CA G1
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:6a:d5:98:f9:09:41:ed:34:e5:d8:5e:f9:1b:a4:
                    0d:21:6c:fd:33:e1:04:68:01:56:03:36:19:80:e1:
                    94:b8:73:56:6c:34:29:16:f5:d4:4b:a0:63:7d:d3:
                    79:65:e0:2d:64:9e:8a:8f:96:ea:ed:40:56:c4:d7:
                    36:4a:42:02:55
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BD:82:CF:47:7B:1E:8C:22:85:FE:8C:A8:1F:C3:E1:B2:DF:FD:A6:99
            X509v3 Authority Key Identifier: 
                keyid:B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: ecdsa-with-SHA256
         30:66:02:31:00:e2:d2:c6:49:81:89:1a:ed:a7:0b:0b:c9:dc:
         63:d3:35:6d:b8:2f:96:40:32:ce:74:55:4f:e3:b5:e5:af:e5:
         ef:11:55:ab:6d:f4:55:73:eb:19:e8:b0:19:99:1f:74:9d:02:
         31:00:cc:5a:e0:d8:c5:03:45:7a:88:11:40:dc:c0:99:36:90:
         c4:e5:be:9b:10:9d:c5:d9:8b:e5:d2:c7:2c:93:90:68:8f:0d:
         e1:38:d3:72:dd:96:de:8c:af:4c:06:98:9f:6d

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06