shuidiov.cer: CN=Shuidi Webtrust SSL Organization Validated,O=Shanghai Ping An Credit Reference Company Limited,C=CN (Intermediate Certificate, Expiring 2027-05-21) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://repository.certum.pl/shuidiov.cer" --output cert.crt

Download certificate through wget:

wget -q "http://repository.certum.pl/shuidiov.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b3:78:0c:84:db:0d:04:1b:1c:d6:6a:40:cb:8d:95:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Global Services CA SHA2
        Validity
            Not Before: Feb  7 09:17:34 2019 GMT
            Not After : May 21 09:17:34 2027 GMT
        Subject: C=CN, O=Shanghai Ping An Credit Reference Company Limited, CN=Shuidi Webtrust SSL Organization Validated
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1f:1f:ff:d9:42:91:25:2b:7e:ff:3b:d2:77:
                    1e:b0:08:50:86:c2:c6:0a:56:34:10:3f:7d:09:2e:
                    5a:9d:c0:33:59:bc:70:65:4a:ae:3a:74:d4:fd:4a:
                    5a:47:ed:e6:55:7e:32:51:7f:b8:60:10:4e:4f:c7:
                    d9:67:38:cf:c4:48:c8:69:ea:80:3b:24:71:b0:ca:
                    00:f8:36:66:22:3a:a9:87:14:0d:f9:01:01:3c:da:
                    1a:d5:6c:58:d5:0d:98:6a:32:69:a2:d5:e5:4d:24:
                    e2:d7:3d:7f:aa:58:87:66:4b:40:a2:ab:52:58:b0:
                    74:a9:fa:64:70:5d:d6:f5:3f:09:57:8c:fc:a9:e8:
                    c3:8a:69:be:ea:6b:14:11:0d:58:12:6a:48:65:22:
                    d0:3f:31:21:8b:c3:d9:30:9a:d4:e2:44:b1:ec:4d:
                    4c:16:ca:24:d3:c3:c1:5d:74:fa:0f:56:e9:ab:80:
                    cb:f1:c5:ef:db:fb:5a:cc:92:5c:db:15:50:88:df:
                    76:42:db:ff:80:db:f3:f3:7b:b4:e7:7d:a1:75:e2:
                    82:c1:83:c8:c6:67:dc:b4:b4:15:24:d0:78:f0:8b:
                    f1:2f:55:f1:8c:ef:3e:a1:f0:3a:4a:28:18:ab:2a:
                    b6:f2:6f:dd:76:90:fb:b8:4c:9c:f6:e1:6b:8a:25:
                    e2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                E8:46:10:C7:72:9E:3F:29:F1:CE:74:7A:C2:55:96:6F:20:25:A8:42
            X509v3 Authority Key Identifier: 
                keyid:54:99:DD:9B:FF:E8:A7:0E:A3:19:9D:5B:BE:42:57:DF:30:FC:8F:32

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://subca.crl.certum.pl/gscasha2.crl

            Authority Information Access: 
                OCSP - URI:http://subca.ocsp-certum.com
                CA Issuers - URI:http://repository.certum.pl/gscasha2.cer

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.certum.pl/CPS

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:0c:39:f1:53:c2:84:14:b8:46:e8:64:2d:f2:3f:72:c8:
         5e:26:37:c6:85:7d:b2:6d:de:cb:06:74:a3:cd:81:08:21:56:
         c2:8f:bb:04:56:b2:37:cd:42:67:db:54:24:22:7f:0f:ac:d5:
         ca:e6:91:8a:e4:5c:f3:a4:c1:44:49:cf:e7:52:40:e0:34:2d:
         93:bb:07:cf:31:5b:f2:22:89:36:60:b6:c5:18:3d:83:cf:a7:
         67:16:3a:e2:2e:b8:b0:cc:ab:53:d9:8e:36:c1:68:28:b1:58:
         ae:01:d4:dd:63:1e:8d:c0:ff:61:44:c6:cf:f2:e9:fc:6f:e7:
         47:6c:b0:60:a6:18:4f:fd:7e:ec:4e:d3:d5:d6:4f:9e:c9:8d:
         a3:6c:df:9a:c1:80:d5:1d:a6:55:41:35:2a:5c:67:19:cd:38:
         7b:25:3c:91:f6:d5:02:ef:6a:29:5a:40:c7:e8:ab:87:d4:35:
         04:a5:94:67:1f:9f:ca:7a:6b:44:2e:8b:9e:e4:90:61:68:5d:
         71:b1:7f:fd:04:8d:68:d6:67:9e:9f:46:84:49:92:1c:2a:b1:
         98:19:6b:7b:bb:69:09:86:9e:ce:4b:77:11:54:ae:e3:e1:6d:
         51:9b:77:c6:e7:89:90:3f:33:a2:b8:1d:df:5f:3b:0a:bc:0f:
         5b:3c:7d:4c

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIRALN4DITbDQQbHNZqQMuNlXMwDQYJKoZIhvcNAQELBQAw
gYMxCzAJBgNVBAYTAlBMMSIwIAYDVQQKExlVbml6ZXRvIFRlY2hub2xvZ2llcyBT
LkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJzAl
BgNVBAMTHkNlcnR1bSBHbG9iYWwgU2VydmljZXMgQ0EgU0hBMjAeFw0xOTAyMDcw
OTE3MzRaFw0yNzA1MjEwOTE3MzRaMH4xCzAJBgNVBAYTAkNOMTowOAYDVQQKDDFT
aGFuZ2hhaSBQaW5nIEFuIENyZWRpdCBSZWZlcmVuY2UgQ29tcGFueSBMaW1pdGVk
MTMwMQYDVQQDDCpTaHVpZGkgV2VidHJ1c3QgU1NMIE9yZ2FuaXphdGlvbiBWYWxp
ZGF0ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdHx//2UKRJSt+
/zvSdx6wCFCGwsYKVjQQP30JLlqdwDNZvHBlSq46dNT9SlpH7eZVfjJRf7hgEE5P
x9lnOM/ESMhp6oA7JHGwygD4NmYiOqmHFA35AQE82hrVbFjVDZhqMmmi1eVNJOLX
PX+qWIdmS0Ciq1JYsHSp+mRwXdb1PwlXjPyp6MOKab7qaxQRDVgSakhlItA/MSGL
w9kwmtTiRLHsTUwWyiTTw8FddPoPVumrgMvxxe/b+1rMklzbFVCI33ZC2/+A2/Pz
e7TnfaF14oLBg8jGZ9y0tBUk0Hjwi/EvVfGM7z6h8DpKKBirKrbyb912kPu4TJz2
4WuKJeI9AgMBAAGjggFsMIIBaDASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQW
BBToRhDHcp4/KfHOdHrCVZZvICWoQjAfBgNVHSMEGDAWgBRUmd2b/+inDqMZnVu+
QlffMPyPMjAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9zdWJjYS5jcmwuY2VydHVt
LnBsL2dzY2FzaGEyLmNybDBuBggrBgEFBQcBAQRiMGAwKAYIKwYBBQUHMAGGHGh0
dHA6Ly9zdWJjYS5vY3NwLWNlcnR1bS5jb20wNAYIKwYBBQUHMAKGKGh0dHA6Ly9y
ZXBvc2l0b3J5LmNlcnR1bS5wbC9nc2Nhc2hhMi5jZXIwOQYDVR0gBDIwMDAuBgRV
HSAAMCYwJAYIKwYBBQUHAgEWGGh0dHA6Ly93d3cuY2VydHVtLnBsL0NQUzANBgkq
hkiG9w0BAQsFAAOCAQEAb5gMOfFTwoQUuEboZC3yP3LIXiY3xoV9sm3eywZ0o82B
CCFWwo+7BFayN81CZ9tUJCJ/D6zVyuaRiuRc86TBREnP51JA4DQtk7sHzzFb8iKJ
NmC2xRg9g8+nZxY64i64sMyrU9mONsFoKLFYrgHU3WMejcD/YUTGz/Lp/G/nR2yw
YKYYT/1+7E7T1dZPnsmNo2zfmsGA1R2mVUE1KlxnGc04eyU8kfbVAu9qKVpAx+ir
h9Q1BKWUZx+fynprRC6LnuSQYWhdcbF//QSNaNZnnp9GhEmSHCqxmBlre7tpCYae
zkt3EVSu4+FtUZt3xueJkD8zorgd3187CrwPWzx9TA==
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06