entrust_l1g_sha1.cer: CN=Entrust Certification Authority - L1G,OU=(c) 2012 Entrust, Inc. - for authorized use only,OU=See www.entrust.net/legal-terms,O=Entrust, Inc.,C=US (Intermediate Certificate, Expiring 2030-12-06) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://web.entrust.com/root-certificates/entrust_l1g_sha1.cer" --output cert.crt

Download certificate through wget:

wget -q "https://web.entrust.com/root-certificates/entrust_l1g_sha1.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            de:bc:95:02:00:00:00:00:51:d3:56:3f
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G3
        Validity
            Not Before: Oct  6 14:45:59 2015 GMT
            Not After : Dec  6 15:15:59 2030 GMT
        Subject: C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1G
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:ec:d0:9b:91:c8:db:d4:42:9e:10:f9:e9:
                    1e:28:08:31:aa:ae:7d:41:62:81:72:ad:ce:64:2f:
                    d4:ba:c0:dc:64:41:e0:53:19:b7:2a:f2:3a:50:f8:
                    7a:44:5e:14:4d:09:e4:f1:12:27:c0:92:58:b5:15:
                    e4:c2:3b:01:6a:99:8f:62:f4:87:9c:31:03:60:e3:
                    ea:25:78:40:86:ed:bd:10:12:ba:98:21:1a:0e:62:
                    b8:cf:49:8a:20:f3:d9:f9:19:30:fc:83:99:24:00:
                    4b:1c:f7:07:8f:cd:8f:63:09:32:d1:f9:b1:25:ab:
                    a3:c0:8a:26:e3:74:2c:92:d3:81:28:ac:bf:af:86:
                    d1:1a:67:6c:2c:b3:8b:90:e9:85:2e:d5:7f:7f:a2:
                    78:ce:51:20:96:89:22:6c:59:65:18:ac:14:b5:60:
                    1c:0f:e0:59:01:cf:83:34:23:aa:6b:d7:74:5c:9c:
                    36:07:91:ac:c8:95:4e:67:c2:e6:f2:2b:8c:7e:29:
                    29:77:a7:48:2e:72:a6:21:a2:57:54:95:c7:03:8b:
                    80:cd:7b:78:4f:46:7a:61:24:63:98:d2:ff:ca:65:
                    e3:4d:44:43:92:33:74:11:c5:f9:1f:82:05:33:95:
                    c3:47:d1:42:cd:1a:16:7d:8c:6e:11:f1:76:10:d2:
                    5d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.entrust.net

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.entrust.net/g3ca.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114028.10.1.9.1
                  CPS: http://www.entrust.net/rpa

            X509v3 Subject Key Identifier: 
                33:E9:D1:9C:AF:01:53:C3:FD:84:C3:A9:F8:71:B2:3F:7E:FC:63:BB
            X509v3 Authority Key Identifier: 
                keyid:B5:75:01:EE:41:C7:CA:7A:3F:F2:FC:5A:56:C7:76:06:0B:06:6C:66

    Signature Algorithm: sha1WithRSAEncryption
         0a:51:fc:55:f0:50:be:e0:79:50:94:16:fa:0d:31:95:f2:50:
         88:86:0a:82:8c:a2:b5:5c:67:2c:6b:79:41:7a:1b:de:3d:eb:
         a7:0f:cc:a2:f9:05:10:e7:d9:9f:b7:73:a3:a4:b6:ba:53:63:
         01:16:5f:74:49:b6:aa:5a:a6:6c:e9:85:2f:f6:94:c7:73:4a:
         58:71:fe:02:7e:79:dc:e5:21:c8:9b:a0:c5:0f:a9:cc:76:9e:
         89:f4:f7:9f:c0:6e:cc:5c:a4:06:2b:9d:dc:5f:24:aa:11:43:
         e2:03:f3:aa:cb:32:f2:d0:dc:73:4a:ad:d7:a5:3d:e9:8f:7e:
         9a:5d:6d:2c:17:64:d2:28:a4:89:9d:df:4b:c6:24:f9:a8:90:
         37:79:75:37:c7:5a:8c:5c:9e:fc:c1:c8:3d:f3:e5:e1:18:89:
         89:14:5e:aa:40:77:6e:93:b9:73:53:df:e1:64:9c:39:eb:c6:
         66:0d:3e:92:03:9a:48:bf:78:4a:28:fa:8c:c4:42:14:d1:e5:
         e0:9a:8c:8e:10:58:c1:e8:2b:05:3f:a0:3e:78:3a:46:df:41:
         b5:f7:05:a6:c7:0d:0d:9e:f3:7c:96:60:e9:4a:df:a8:74:2f:
         6d:8b:e8:86:46:3b:57:5b:0e:04:aa:f4:3e:8e:d0:a6:c4:33:
         78:60:9d:e3

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06