ceca.cer: CN=Cisco Employee CA,O=Cisco (Intermediate Certificate, Expiring 2029-05-14) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.cisco.com/security/pki/certs/ceca.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.cisco.com/security/pki/certs/ceca.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:10:80:6d:00:00:00:00:00:0e
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: O=Cisco Systems, CN=Cisco Root CA 2048
        Validity
            Not Before: Apr  4 20:24:18 2014 GMT
            Not After : May 14 20:25:42 2029 GMT
        Subject: O=Cisco, CN=Cisco Employee CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:7e:16:4c:53:15:fb:23:56:cd:c6:b9:65:
                    0a:04:95:e5:de:4c:45:67:8c:0c:c7:06:e0:ab:1f:
                    6d:5f:37:2a:7b:e7:ed:a3:ad:80:7f:11:c8:f3:82:
                    eb:ee:9f:50:d9:c9:bf:3d:a1:2f:bb:3c:11:07:35:
                    ef:b8:a5:d9:51:4e:d9:b0:f7:53:a0:94:80:2c:2c:
                    92:65:ad:10:6f:a1:86:6b:5f:40:0a:99:a5:50:44:
                    1a:90:4d:cf:e6:4c:fb:46:06:8d:48:e3:07:d7:e1:
                    ad:63:d7:d5:e8:27:00:15:bf:6e:07:b2:43:bb:65:
                    06:2f:7d:f6:59:5d:9b:12:c5:2c:7d:bd:eb:44:b0:
                    52:e1:c2:fc:1e:ed:9d:59:f7:1d:93:a7:ab:31:a6:
                    42:42:39:27:d3:81:62:c6:54:2c:26:8c:db:3d:14:
                    d0:a8:8e:15:ea:28:a4:1b:fe:bd:ac:3c:9e:4d:d6:
                    d5:4c:af:8c:cb:ff:4b:9f:05:6c:0f:71:81:32:24:
                    61:ed:19:ab:be:ea:71:b4:68:8c:bb:c8:f4:e4:8b:
                    3f:77:53:a2:7e:15:9e:73:0b:e3:57:74:5e:83:d2:
                    e8:93:c6:cc:34:91:0c:02:97:9d:d7:07:93:75:54:
                    b4:5f:83:2c:02:17:a8:b0:90:65:77:d9:52:e4:ee:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                9F:95:36:B4:8E:5D:D5:4B:C3:0A:C1:A7:29:93:43:51:06:FD:89:51
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Authority Key Identifier: 
                keyid:27:F3:C8:15:1E:6E:9A:02:09:16:AD:2B:A0:89:60:5F:DA:7B:2F:AA

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://www.cisco.com/security/pki/crl/crca2048.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.cisco.com/security/pki/certs/crca2048.cer

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.9.21.1.21.0
                  CPS: http://www.cisco.com/security/pki/policies/index.html

    Signature Algorithm: sha1WithRSAEncryption
         3e:4e:be:23:1a:46:02:8d:5e:6b:db:8a:02:34:0b:63:9b:e5:
         01:3c:26:5d:8c:70:b2:24:eb:60:5e:ec:8a:84:64:2e:1b:59:
         15:a3:67:1a:e1:16:e3:fd:e0:4d:7d:44:9a:23:28:d2:ed:b6:
         f7:a2:1f:e7:44:cd:ed:6d:ea:86:21:54:28:ac:6c:61:bc:fb:
         c8:65:50:04:40:8a:2a:8b:fc:9f:6e:18:9e:f5:c5:3e:a5:a2:
         a9:1c:00:ae:71:a6:17:bb:49:32:4b:4a:58:13:93:4c:36:e9:
         f7:2f:0d:e8:80:eb:38:5d:54:79:ca:85:52:a4:a4:e2:56:77:
         d3:0d:07:21:4e:9c:24:32:0c:e2:be:a5:c3:71:2d:4e:88:37:
         d4:f0:2f:56:68:46:47:45:6b:5d:50:88:25:f7:3a:29:a4:f1:
         88:41:ad:53:7e:57:31:86:2a:d6:e0:67:87:d8:53:ab:81:a3:
         75:77:be:db:21:c8:3a:47:b4:69:27:d5:ee:df:f7:f4:d6:71:
         8d:ba:7a:d1:73:2f:7d:dd:cd:a6:78:94:28:65:c3:89:77:5e:
         42:ea:e8:07:c2:10:31:79:76:3a:41:76:20:91:8f:0a:41:50:
         82:1b:09:29:b2:11:20:6f:03:eb:0b:e2:3f:22:d6:fa:3f:b8:
         46:ab:b6:b0

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06