gtsltsr.der: CN=GTS LTSR,O=Google Trust Services LLC,C=US (Root Certificate, Expiring 2042-11-01) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

  • Certificate Download URL: https://pki.goog/repo/certs/gtsltsr.der (in DER format )
  • Serial Number : 153803912618085780140814725456
  • SHA-1 Fingerprint : d58ca7a1b41ff8fe4d637feeffae504aaaff4f6f
  • SHA-1 Fingerprint : d5:8c:a7:a1:b4:1f:f8:fe:4d:63:7f:ee:ff:ae:50:4a:aa:ff:4f:6f
  • SHA-256 Fingerprint : 0a76f50ae47b05d9a85954a1de9bc0b936bcd212911bcbfa650030072d17d946
  • SHA-256 Fingerprint : 0a:76:f5:0a:e4:7b:05:d9:a8:59:54:a1:de:9b:c0:b9:36:bc:d2:12:91:1b:cb:fa:65:00:30:07:2d:17:d9:46
  • Signature Hash Algorithm : sha256
  • Subject : CN=GTS LTSR,O=Google Trust Services LLC,C=US
    • Country Name: US (United States of America)
    • Organization: Google Trust Services LLC
    • Common Name: GTS LTSR
  • Not Valid Before: 2018-11-01 00:00:42
  • Not Valid After: 2042-11-01 00:00:42
  • Issuer (Parent Certificate):
  • Audit Record:
    • No public audit information was found by E2Encrypted.com. We update this information regularly, check back later.

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/gtsltsr.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/gtsltsr.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f0:f7:9d:59:dd:6e:50:f7:42:73:71:50
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS LTSR
        Validity
            Not Before: Nov  1 00:00:42 2018 GMT
            Not After : Nov  1 00:00:42 2042 GMT
        Subject: C=US, O=Google Trust Services LLC, CN=GTS LTSR
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:cd:f1:8c:8e:da:ef:b2:09:0a:19:77:00:24:50:
                    db:f9:73:77:68:91:f5:0b:7e:b0:3a:40:98:05:57:
                    65:cc:b8:43:6d:41:92:06:e4:75:0e:4b:a8:c5:9f:
                    c7:f4:c9:29:55:78:e4:42:c6:a1:72:8c:32:72:46:
                    7f:3a:77:e2:24
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                3E:FE:FF:CC:52:EB:BF:34:3E:3D:F3:40:D0:E4:25:B1:5F:B8:BB:52
    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:21:00:f2:ae:7f:f5:6d:04:7a:86:c3:74:d4:c1:42:
         2a:ed:37:da:13:1a:77:6c:7e:db:8c:20:66:55:72:6e:a5:3f:
         45:02:20:6b:d1:29:82:b6:cb:a4:9a:21:a0:a5:a8:e3:7f:f8:
         05:8a:01:8c:df:81:7d:d3:6d:5b:09:6b:35:31:b2:f4:48

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIBxTCCAWugAwIBAgINAfD3nVndblD3QnNxUDAKBggqhkjOPQQDAjBEMQswCQYD
VQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzERMA8G
A1UEAxMIR1RTIExUU1IwHhcNMTgxMTAxMDAwMDQyWhcNNDIxMTAxMDAwMDQyWjBE
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzERMA8GA1UEAxMIR1RTIExUU1IwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATN
8YyO2u+yCQoZdwAkUNv5c3dokfULfrA6QJgFV2XMuENtQZIG5HUOS6jFn8f0ySlV
eORCxqFyjDJyRn86d+Iko0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUw
AwEB/zAdBgNVHQ4EFgQUPv7/zFLrvzQ+PfNA0OQlsV+4u1IwCgYIKoZIzj0EAwID
SAAwRQIhAPKuf/VtBHqGw3TUwUIq7TfaExp3bH7bjCBmVXJupT9FAiBr0SmCtsuk
miGgpajjf/gFigGM34F9021bCWs1MbL0SA==
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: 83e4e96 2023-05-07