01F09C5B7005A6DC86E2F99EF3.der: CN=GTS Y4,O=Google Trust Services LLC,C=US (Intermediate Certificate, Expiring 2028-11-01) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://pki.goog/repo/certs/01F09C5B7005A6DC86E2F99EF3.der (in DER format )
Serial Number : 153693589101039568920145141491
SHA-1 Fingerprint : d3a58b0ac2c620bc5c87aa9bbad4c215130704e2
SHA-1 Fingerprint : d3:a5:8b:0a:c2:c6:20:bc:5c:87:aa:9b:ba:d4:c2:15:13:07:04:e2
SHA-256 Fingerprint : 55bab3c516d50e7f35f86ea948a7ccdf7d5ee680eaa9ab49fa258a614cd1fade
SHA-256 Fingerprint : 55:ba:b3:c5:16:d5:0e:7f:35:f8:6e:a9:48:a7:cc:df:7d:5e:e6:80:ea:a9:ab:49:fa:25:8a:61:4c:d1:fa:de
Signature Hash Algorithm : sha256
Subject : CN=GTS Y4,O=Google Trust Services LLC,C=US
- Country Name: US (United States of America)
- Organization: Google Trust Services LLC
- Common Name: GTS Y4
Not Valid Before: 2018-11-01 00:00:42
Not Valid After: 2028-11-01 00:00:42
Issuer (Parent Certificate):
- Issuer Name: CN=GTS Root R4,O=Google Trust Services LLC,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=GTS Root R4,O=Google Trust Services LLC,C=US .

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/01F09C5B7005A6DC86E2F99EF3.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/01F09C5B7005A6DC86E2F99EF3.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f0:9c:5b:70:05:a6:dc:86:e2:f9:9e:f3
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS Root R4
        Validity
            Not Before: Nov  1 00:00:42 2018 GMT
            Not After : Nov  1 00:00:42 2028 GMT
        Subject: C=US, O=Google Trust Services LLC, CN=GTS Y4
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:a8:f2:5b:3a:88:20:52:fc:a5:88:5e:54:b3:d8:
                    6a:d3:8e:ca:0e:b2:8f:f6:e5:62:63:04:75:de:38:
                    d9:08:ce:2b:82:43:9d:72:25:6e:37:4c:3c:ce:ec:
                    73:16:74:16:69:8d:2b:d3:ce:47:c1:02:80:af:ca:
                    c6:b1:b2:58:76
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                B4:A7:99:8A:F8:91:49:AC:8E:58:B9:B3:5E:4F:CC:70:98:CD:22:67
            X509v3 Authority Key Identifier: 
                keyid:80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C

            Authority Information Access: 
                OCSP - URI:http://ocsp.pki.goog/gtsr4
                CA Issuers - URI:http://pki.goog/gtsr4/gtsr4.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.pki.goog/gtsr4/gtsr4.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2

    Signature Algorithm: ecdsa-with-SHA256
         30:64:02:30:70:94:b4:b1:41:e6:7c:fc:75:d7:97:a9:d5:5c:
         cb:4a:0c:f5:47:3b:46:92:3a:f7:9d:0c:02:46:a0:79:ad:57:
         20:26:a1:da:e4:56:d3:a8:78:be:a8:c7:52:d8:fd:3e:02:30:
         5a:be:c8:fd:75:46:bb:4e:b7:db:ee:ad:f8:3a:08:f1:17:28:
         43:55:d2:a0:5b:1f:89:c6:ae:c6:7b:70:a4:23:f7:4c:41:7f:
         b8:63:ed:18:e7:61:d9:0e:1a:a5:37:24

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates