GeoTrustTLSECCCAG1.crt: CN=GeoTrust TLS ECC CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.geotrust.com/GeoTrustTLSECCCAG1.crt (DER format)
  • Serial number: 4373211496707225319515854668285497709
  • SHA-1 Fingerprint: bfe7ba21a2fa56719b61f64ee1b269d0b80b44e5
  • SHA-1 Fingerprint: bf:e7:ba:21:a2:fa:56:71:9b:61:f6:4e:e1:b2:69:d0:b8:0b:44:e5
  • SHA-256 Fingerprint: a838405ebb03f5dfd8d4a9572ae6e0e3f356ec4ec134375a59db7b195dc3ec44
  • SHA-256 Fingerprint: a8:38:40:5e:bb:03:f5:df:d8:d4:a9:57:2a:e6:e0:e3:f3:56:ec:4e:c1:34:37:5a:59:db:7b:19:5d:c3:ec:44
  • Signature hash algorithm: sha256
  • Subject: CN=GeoTrust TLS ECC CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US
  • Not valid before: 2017-11-02 12:59:38
  • Not valid after: 2027-11-02 12:59:38
  • Issuer:
    • Issuer name: CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.geotrust.com/GeoTrustTLSECCCAG1.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.geotrust.com/GeoTrustTLSECCCAG1.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4a:3f:f9:47:be:39:c1:99:ce:b8:06:96:1e:51:6d
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
        Validity
            Not Before: Nov  2 12:59:38 2017 GMT
            Not After : Nov  2 12:59:38 2027 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS ECC CA G1
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:6a:d5:98:f9:09:41:ed:34:e5:d8:5e:f9:1b:a4:
                    0d:21:6c:fd:33:e1:04:68:01:56:03:36:19:80:e1:
                    94:b8:73:56:6c:34:29:16:f5:d4:4b:a0:63:7d:d3:
                    79:65:e0:2d:64:9e:8a:8f:96:ea:ed:40:56:c4:d7:
                    36:4a:42:02:55
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BD:82:CF:47:7B:1E:8C:22:85:FE:8C:A8:1F:C3:E1:B2:DF:FD:A6:99
            X509v3 Authority Key Identifier: 
                keyid:B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: ecdsa-with-SHA256
         30:66:02:31:00:e2:d2:c6:49:81:89:1a:ed:a7:0b:0b:c9:dc:
         63:d3:35:6d:b8:2f:96:40:32:ce:74:55:4f:e3:b5:e5:af:e5:
         ef:11:55:ab:6d:f4:55:73:eb:19:e8:b0:19:99:1f:74:9d:02:
         31:00:cc:5a:e0:d8:c5:03:45:7a:88:11:40:dc:c0:99:36:90:
         c4:e5:be:9b:10:9d:c5:d9:8b:e5:d2:c7:2c:93:90:68:8f:0d:
         e1:38:d3:72:dd:96:de:8c:af:4c:06:98:9f:6d

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26