6E47A9CE4F46C23DE249EACC38945373.der: CN=GTS X4,O=Google Trust Services LLC,C=US (Intermediate Certificate, Expiring 2026-06-22) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/6E47A9CE4F46C23DE249EACC38945373.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/6E47A9CE4F46C23DE249EACC38945373.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:47:a9:ce:4f:46:c2:3d:e2:49:ea:cc:38:94:53:73
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS Root R4
        Validity
            Not Before: Jun 22 00:00:00 2016 GMT
            Not After : Jun 22 00:00:00 2026 GMT
        Subject: C=US, O=Google Trust Services LLC, CN=GTS X4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4b:13:33:66:f3:9c:7e:2b:36:35:89:46:c8:
                    d0:04:76:1b:ac:22:59:c2:c5:f5:57:26:8f:c4:83:
                    31:c6:e0:05:97:a2:66:be:bd:ac:79:8c:10:58:75:
                    09:da:7b:bf:86:64:df:ef:45:64:4b:c2:52:dc:29:
                    fa:e3:64:a7:e8:82:b2:8e:bc:54:b0:83:cd:7c:63:
                    39:d9:7e:1b:85:01:25:17:7a:e6:a5:73:9c:61:68:
                    8f:71:d0:c8:4b:40:6e:53:41:51:57:34:67:29:81:
                    7a:84:af:1b:b9:38:de:ff:74:25:71:8a:fd:ec:fc:
                    e9:df:fe:c7:bb:58:eb:17:f5:7f:d8:75:a9:eb:f5:
                    0c:97:44:85:a8:2d:d8:bc:95:f3:6c:4c:93:9f:d4:
                    7e:0a:bd:ab:24:d0:e1:04:cc:7d:67:9c:d2:e4:3e:
                    35:02:50:f5:23:f4:e2:f0:25:b8:f0:2b:4c:2e:c3:
                    a5:2c:ff:03:9a:43:88:e1:15:46:52:17:31:22:19:
                    71:92:6c:46:cd:f2:7f:b6:7e:ac:9d:be:e1:03:2f:
                    3f:68:36:f3:c8:cb:9b:b6:0f:0f:f8:1f:a9:a7:4a:
                    5d:02:d9:e4:3e:c7:b9:65:3d:75:b9:29:90:f3:39:
                    5b:b4:72:dc:96:aa:62:4d:e2:a1:3b:67:a7:d8:ec:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                FE:9C:9C:0E:77:C1:48:11:0D:7C:19:0A:25:D5:E2:AB:64:57:DF:65
            X509v3 Authority Key Identifier: 
                keyid:80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C

            Authority Information Access: 
                OCSP - URI:http://ocsp.pki.goog/gtsr4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.pki.goog/gtsr4/gtsr4.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://pki.goog/repository/

    Signature Algorithm: ecdsa-with-SHA256
         30:65:02:30:5e:53:66:90:82:00:02:c7:71:93:9d:9e:e7:c0:
         28:8e:f7:be:57:2b:78:cf:e1:78:1f:75:e9:86:f9:2f:3d:ec:
         cd:01:fb:f4:c2:62:d0:ab:c8:89:97:4b:48:64:99:2b:02:31:
         00:ea:74:b8:6b:c9:c2:3e:10:65:15:64:c1:6b:c6:63:94:8a:
         1a:5c:ec:b3:99:83:01:9e:90:24:84:0b:b8:ee:08:e0:31:ad:
         0a:23:dc:78:39:1a:8f:19:f6:f5:d5:ed:3c

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06