TrustSignRSADVCA.crt: CN=TrustSign RSA DV CA,O=Ziwit,L=Montpellier,ST=Herault,C=FR (Intermediate Certificate, Expiring 2028-12-02) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://ziwit.crt.sectigo.com/TrustSignRSADVCA.crt" --output cert.crt

Download certificate through wget:

wget -q "http://ziwit.crt.sectigo.com/TrustSignRSADVCA.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:27:5b:2c:bf:90:91:1a:11:c1:f5:d7:e5:73:ee:73
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
        Validity
            Not Before: Dec  3 00:00:00 2018 GMT
            Not After : Dec  2 23:59:59 2028 GMT
        Subject: C=FR, ST=Herault, L=Montpellier, O=Ziwit, CN=TrustSign RSA DV CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f9:59:31:36:2f:d8:8d:ca:e4:03:d7:1b:6a:
                    a8:e5:08:9c:72:a8:66:8d:7d:87:e1:5d:3e:ed:65:
                    bc:e9:13:a8:c3:74:53:f8:74:79:1a:94:c1:bb:71:
                    84:1e:88:78:e7:6c:8b:48:02:74:e5:98:74:96:2e:
                    4e:dd:66:75:75:dd:c7:a1:8d:c6:81:2f:1c:a2:f3:
                    3b:05:06:82:98:c6:47:62:fd:99:ab:a2:c9:89:27:
                    05:49:8c:29:43:a5:d2:2a:2e:fe:fb:92:fa:12:10:
                    dd:75:94:25:c2:20:56:d3:a6:15:99:69:ef:dd:82:
                    21:07:31:56:ff:76:be:61:61:7b:65:b2:c8:a0:e0:
                    c5:a9:dd:d3:62:f3:de:cb:74:e9:51:e7:a7:a0:e2:
                    0b:e3:b8:32:3d:82:86:5f:04:e4:ee:24:31:0c:62:
                    6a:a8:6a:da:ba:27:3e:99:ea:19:c7:d5:d5:ef:1d:
                    90:57:e9:66:01:10:d0:70:d4:c1:7c:97:28:b0:d2:
                    02:69:d8:4a:26:73:dd:87:27:f0:a1:93:8c:40:be:
                    92:89:35:89:8f:df:eb:47:b5:fe:d5:cc:b0:c7:21:
                    57:ac:3a:d2:35:06:a5:75:56:1e:82:b1:42:93:4f:
                    a9:38:ad:c0:0a:12:50:ac:04:33:e6:5a:ac:80:1a:
                    23:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB

            X509v3 Subject Key Identifier: 
                5B:86:C5:38:85:25:33:8C:35:EA:45:DA:F5:4F:79:5C:75:EA:BE:87
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.65
                Policy: 2.23.140.1.2.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha384WithRSAEncryption
         34:05:6b:88:d3:0e:95:d2:b5:22:67:46:22:6a:e4:11:46:32:
         a0:cf:88:e2:0b:8d:11:ea:29:d0:09:5e:a1:c0:83:00:cd:d9:
         95:9d:ee:8d:91:dd:c5:27:b9:99:7a:71:a0:2c:ad:da:f0:36:
         45:b8:e2:9f:db:50:07:4c:a0:5b:5b:c2:ca:dd:a4:7a:51:bf:
         54:79:05:97:35:7e:f6:b1:1b:d7:65:c3:a5:c6:2c:a7:85:0f:
         84:22:44:83:fb:a0:54:e4:fb:02:15:68:01:78:ac:de:71:d2:
         64:99:f2:50:41:95:1e:12:1c:38:e8:10:de:2e:ac:32:74:68:
         1d:48:5e:24:35:d9:fb:b5:8d:6d:03:40:69:80:9f:ea:f5:a9:
         50:77:40:c5:27:70:e4:f6:64:dc:10:34:92:8d:0c:a7:d8:14:
         ab:e6:c4:00:c0:11:d7:9a:90:47:cf:05:e0:d1:79:73:4d:f9:
         c8:e5:6a:52:72:f7:b9:c7:d9:d6:7c:11:f5:9a:2c:d3:06:d7:
         35:38:82:7a:d4:a9:29:74:16:ea:45:49:c0:45:5e:f1:e3:76:
         a3:c8:dc:b6:bc:10:64:b0:fb:ea:fa:d3:f2:10:40:92:0f:cc:
         8d:a0:75:56:af:88:4e:36:67:b7:15:09:ab:21:08:5f:7e:05:
         3f:27:90:f8:ff:69:0f:45:a1:6c:82:5e:03:2e:72:31:5b:b7:
         92:83:96:4f:f0:3f:1c:65:dd:da:4e:ee:da:5c:18:a6:da:b1:
         76:84:18:ea:e0:8e:67:c4:db:f3:c8:cd:e6:51:55:48:8f:15:
         0e:12:d5:de:25:88:96:0f:a1:08:4c:88:3c:cd:7a:5d:b5:16:
         01:e4:5e:61:b0:61:27:49:22:d4:c6:9e:53:97:a3:d4:7c:0a:
         b9:2f:cf:e0:f3:93:92:09:0b:62:f8:3d:15:5d:99:a4:5c:0a:
         cc:7e:c7:3a:ae:35:6f:1b:08:8e:6e:42:81:a3:29:4f:13:32:
         4d:d9:6e:68:a1:4e:c6:dd:c7:32:bc:03:fd:96:5e:d5:03:dc:
         73:10:3d:eb:9b:b7:cb:4a:0b:47:b6:c5:94:b1:71:4e:a0:e5:
         27:8a:6b:33:69:0f:f5:a9:ee:ff:b1:ea:ae:a0:46:fe:aa:57:
         98:d3:5b:73:86:89:3d:51:68:4b:5e:53:ee:a3:26:2b:02:45:
         c3:6d:df:53:3d:72:4a:ee:ef:01:67:4a:4e:16:b2:a5:22:13:
         5a:6e:d9:60:d7:42:71:92:47:9f:3c:47:c9:38:61:7d:a1:fa:
         08:11:8e:85:de:7f:a1:fb:e9:f3:25:af:1a:c3:59:bd:f5:3e:
         02:0d:67:2f:72:88:32:22

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06