PublicCA.cer: OU=Public Certification Authority,O=Chunghwa Telecom Co., Ltd.,C=TW (Intermediate Certificate, Expiring 2027-05-16) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://eca.hinet.net/download/PublicCA.cer" --output cert.crt

Download certificate through wget:

wget -q "http://eca.hinet.net/download/PublicCA.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            97:3c:c9:4d:44:cf:e9:a2:e1:4f:52:e9:a5:94:a1:5a
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority
        Validity
            Not Before: May 16 10:13:55 2007 GMT
            Not After : May 16 10:13:55 2027 GMT
        Subject: C=TW, O=Chunghwa Telecom Co., Ltd., OU=Public Certification Authority
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c4:51:b4:68:80:17:be:52:79:5d:e3:6e:0b:
                    6f:38:af:33:8a:50:74:29:d5:fe:e3:5e:ed:2d:b6:
                    f3:bf:bd:7e:a0:b1:9e:3b:4a:7f:19:e2:fc:7c:f0:
                    4e:24:a1:c4:69:5a:59:cc:fd:a1:79:e7:05:58:22:
                    cd:4d:48:90:69:f7:53:5b:db:24:c6:8c:80:e5:f5:
                    09:b0:98:35:d8:f4:6a:d6:1f:2a:ec:51:9a:d4:1f:
                    3c:03:fa:06:65:15:17:be:30:e7:39:e3:0c:98:73:
                    58:ed:30:9b:5e:71:b3:1f:9f:85:bf:3d:1f:3a:94:
                    0d:5f:60:0b:d6:8a:d4:b2:a0:a0:01:61:22:2f:27:
                    6c:6c:6b:28:48:59:72:16:65:cc:81:cd:33:14:06:
                    81:d7:00:24:b5:02:23:91:13:a0:a8:77:ff:11:d6:
                    bf:f2:82:44:95:57:38:3d:75:02:d2:e6:c0:c7:41:
                    1f:11:8d:84:87:8e:52:96:b1:d2:c1:d1:99:eb:1c:
                    52:2e:fa:b6:a1:a9:dc:f0:ec:2b:3e:77:0b:6c:ac:
                    2e:c0:5f:e0:5c:a4:89:04:ab:7c:a1:2a:c8:b8:3e:
                    47:19:3a:ea:e9:6d:7f:8d:5c:40:b0:26:e3:e5:b0:
                    5c:8b:f1:c2:ab:46:10:6b:a8:11:63:56:5d:dc:a5:
                    44:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:1E:0C:F7:B6:67:F2:E1:92:26:09:45:C0:55:39:2E:77:3F:42:4A:A2

            X509v3 Subject Key Identifier: 
                71:B3:50:31:A0:1B:5B:7B:B2:A6:59:7C:FD:10:8C:3C:AD:3A:3D:7A
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://eca.hinet.net/repository/CRL/CA.crl

            Authority Information Access: 
                CA Issuers - URI:http://eca.hinet.net/repository/Certs/IssuedToThisCA.p7b
                OCSP - URI:http://ocsp.eca.hinet.net/OCSP/ocspG1sha1

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.23459.100.0.1
                Policy: 1.3.6.1.4.1.23459.100.0.2
                Policy: 1.3.6.1.4.1.23459.100.0.3
                Policy: 2.16.886.1.100.0.1
                Policy: 2.16.886.1.100.0.2
                Policy: 2.16.886.1.100.0.3
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2

    Signature Algorithm: sha1WithRSAEncryption
         a1:5d:18:78:d4:17:86:02:d4:db:89:2a:94:a6:cb:2f:57:bb:
         fa:61:ed:c2:a2:58:22:1d:a5:8a:74:5c:0c:7b:e8:ac:4b:ea:
         46:db:5a:94:bf:dc:35:19:a3:31:48:45:1c:b4:d3:6b:eb:4e:
         f2:18:78:35:13:13:e1:f6:0e:ad:57:46:37:4c:9e:29:e0:01:
         35:15:8e:47:31:79:24:7f:93:a3:1c:90:61:16:2f:8c:f3:6d:
         d0:9a:8a:08:30:b8:68:65:9c:3e:34:46:9a:c1:30:94:1a:45:
         0c:98:2a:42:8b:b2:61:21:ee:9d:ea:88:c3:c5:33:ac:90:f9:
         f9:42:1f:0a:37:1d:42:a6:f0:35:57:90:fe:86:d1:60:f7:ed:
         71:2f:9a:80:2b:83:bc:8d:3c:d9:d7:e3:a8:ce:11:01:90:56:
         d9:6d:f8:f3:ad:41:bb:75:40:18:bd:c1:14:86:e5:30:08:ab:
         21:fc:17:8e:d4:7d:dc:bf:11:91:84:59:95:af:20:22:f4:8d:
         ff:4a:56:46:16:ce:e4:99:a1:a7:0c:3c:43:f6:aa:5d:c9:ba:
         73:fb:1f:dd:29:5d:8e:51:40:a2:b2:29:e4:71:d5:2e:67:c5:
         b2:f6:ec:11:87:20:e1:22:d1:97:64:82:1e:62:3a:31:7d:f7:
         08:10:09:29:25:d1:de:f1:a4:12:9e:b9:98:36:65:7f:cd:32:
         2d:41:92:4f:cd:82:95:3b:b0:41:cf:43:b8:10:a6:6f:ef:a6:
         4c:14:90:d0:df:da:48:49:97:08:0d:ef:cb:f2:9c:92:08:ce:
         3b:c7:c5:2b:25:78:b8:72:55:59:d3:e2:3e:6a:63:c7:35:85:
         98:75:c1:ba:5e:8a:7d:3e:72:b9:20:ff:c4:d0:55:74:64:05:
         78:9d:7e:de:41:25:da:82:9a:de:d8:5f:14:8b:12:a1:aa:df:
         79:08:93:9f:78:03:97:8c:7e:8b:f7:21:c3:f8:8a:ab:49:00:
         b3:83:de:32:99:f7:a9:84:34:dc:ae:de:4a:bb:03:5d:6c:8a:
         e7:ce:8e:df:de:ad:9d:6d:83:44:98:cc:35:31:9c:32:5f:dc:
         48:de:e7:e8:3d:8e:34:2a:e2:28:ce:1d:1b:b8:6b:7d:5f:64:
         c3:40:ac:4a:a7:9c:6a:6d:9d:a8:46:f3:ad:ee:34:73:ae:30:
         1b:69:67:81:32:76:2e:3a:6e:1b:82:2a:a5:6e:35:f0:83:39:
         19:ce:25:66:7c:19:1d:91:a1:8d:20:59:34:8a:c5:78:eb:35:
         3b:3b:8f:d4:e1:d2:f8:30:8d:de:cf:07:7e:13:4d:10:dc:9e:
         c3:a9:b2:c0:58:9c:8d:59

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06