467437760E4A74366CD27C85664E.der: CN=GlobalSign ECC256 EV SSL CA - G3,O=GlobalSign nv-sa,C=BE (Intermediate Certificate, Expiring 2025-04-30) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/467437760E4A74366CD27C85664E.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/467437760E4A74366CD27C85664E.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:74:37:76:0e:4a:74:36:6c:d2:7c:85:66:4e
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign
        Validity
            Not Before: Apr 30 00:00:00 2015 GMT
            Not After : Apr 30 00:00:00 2025 GMT
        Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign ECC256 EV SSL CA - G3
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:3f:2f:eb:71:b0:96:be:d1:4b:01:f8:1a:f9:bf:
                    e9:86:88:ab:e6:bf:86:bd:b2:81:67:bd:8e:49:86:
                    71:e2:e0:f3:6b:62:0b:5a:57:7f:15:03:1b:d5:05:
                    53:03:0b:7b:f3:88:0f:b6:18:3d:60:8e:62:36:2a:
                    5c:a9:65:ab:df
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                CF:A4:B4:A6:60:31:63:FE:DD:4E:F0:93:86:01:CB:00:7D:26:17:4B
            X509v3 Authority Key Identifier: 
                keyid:54:B0:7B:AD:45:B8:E2:40:7F:FB:0A:6E:FB:BE:33:C9:3C:A3:84:D5

            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/rootr4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.com/root-r4.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.globalsign.com/repository/

    Signature Algorithm: ecdsa-with-SHA256
         30:46:02:21:00:ac:ff:e5:91:b5:95:0c:5d:38:6f:02:92:b5:
         e4:55:32:6f:3e:94:11:b5:72:69:ff:64:89:c1:32:29:36:aa:
         35:02:21:00:97:b8:a5:ff:3c:26:98:b6:34:58:3e:bf:c3:d2:
         85:55:18:96:00:25:2c:c2:5e:f9:a3:b0:31:14:71:c5:e7:f0

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06