secure_sha2_2014.crt: CN=TWCA Secure SSL Certification Authority,OU=Secure SSL Sub-CA,O=TAIWAN-CA,C=TW (Intermediate Certificate, Expiring 2024-10-28) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: http://sslserver.twca.com.tw/cacert/secure_sha2_2014.crt (in DER format )
Serial Number : 85076825076483007851870499652303227021
SHA-1 Fingerprint : 0a72efd660fd34f254e66a8595ba81e60a754e68
SHA-1 Fingerprint : 0a:72:ef:d6:60:fd:34:f2:54:e6:6a:85:95:ba:81:e6:0a:75:4e:68
SHA-256 Fingerprint : 9b16f2f680d7c4bd6a67f609340da6416abf9e43f1326b01b988192271d0b5f2
SHA-256 Fingerprint : 9b:16:f2:f6:80:d7:c4:bd:6a:67:f6:09:34:0d:a6:41:6a:bf:9e:43:f1:32:6b:01:b9:88:19:22:71:d0:b5:f2
Signature Hash Algorithm : sha256
Subject : CN=TWCA Secure SSL Certification Authority,OU=Secure SSL Sub-CA,O=TAIWAN-CA,C=TW
- Country Name: TW (Taiwan (Province of China))
- Organization: TAIWAN-CA
- Organization Unit: Secure SSL Sub-CA
- Common Name: TWCA Secure SSL Certification Authority
Not Valid Before: 2014-10-28 07:27:56
Not Valid After: 2024-10-28 15:59:59
Issuer (Parent Certificate):
- Issuer Name: CN=TWCA Global Root CA,OU=Root CA,O=TAIWAN-CA,C=TW
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- Auditor: KPMG
- Standard Audit URL: Unknown
- Standard Audit Period Start Date: Unknown
- Standard Audit Period End Date: Unknown
- Standard Audit Statement Date: Unknown
- Standard Audit Type: Unknown
- Full CRL Issued By This CA: http://sslserver.twca.com.tw/sslserver/Securessl_revoke_sha2_2014.crl
- Check its issuer’s audit information: CN=TWCA Global Root CA,OU=Root CA,O=TAIWAN-CA,C=TW .

Download certificate through curl:

curl -sSL "http://sslserver.twca.com.tw/cacert/secure_sha2_2014.crt" --output cert.crt

Download certificate through wget:

wget -q "http://sslserver.twca.com.tw/cacert/secure_sha2_2014.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:01:33:53:e4:00:00:00:00:00:00:0c:c3:6e:88:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Global Root CA
        Validity
            Not Before: Oct 28 07:27:56 2014 GMT
            Not After : Oct 28 15:59:59 2024 GMT
        Subject: C=TW, O=TAIWAN-CA, OU=Secure SSL Sub-CA, CN=TWCA Secure SSL Certification Authority
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e0:fe:51:53:a2:01:a6:cf:6a:8e:5d:a9:51:
                    09:6a:16:7e:4a:14:12:b3:11:4a:26:28:1b:2f:23:
                    52:8b:c1:0d:ab:18:55:e3:a6:5c:f2:ed:1a:f5:63:
                    2e:fa:b1:6a:22:86:61:66:ce:d2:1c:d7:8f:84:45:
                    68:bc:13:33:b8:0e:27:0e:46:6a:57:8c:36:3f:8f:
                    2f:84:e8:d4:dd:95:29:0c:55:00:9d:bd:2e:fa:52:
                    24:6b:e2:a7:85:69:d1:a4:53:31:bd:ff:c6:58:88:
                    b2:c9:67:e1:fa:55:68:0e:7d:02:5c:2e:03:23:79:
                    46:b8:a2:e8:76:78:e6:41:53:d9:d7:9f:46:2a:cd:
                    a6:dd:9c:04:50:d4:90:69:23:7e:03:fb:86:dc:9b:
                    4e:dc:01:16:bf:14:7d:44:0b:b3:1b:60:77:b4:26:
                    0b:4b:9f:01:95:6a:90:86:83:35:2e:9b:82:d2:d6:
                    c4:05:31:50:9a:28:68:18:4d:32:bc:93:0b:f6:09:
                    81:3d:7a:68:0f:a7:d3:f1:74:f8:d1:1e:2e:36:64:
                    e1:1e:2f:d3:95:ce:9b:c9:46:78:b2:87:69:56:4a:
                    ad:b0:ab:0b:f6:d1:0f:92:ab:e9:06:e1:55:0e:0e:
                    1e:b9:b1:93:59:ae:27:fd:6f:e5:51:a7:e7:bc:05:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:48:DB:CD:DE:8E:E9:49:72:5A:88:E8:B1:D8:3D:07:B3:B9:6B:66:50

            X509v3 Subject Key Identifier: 
                F8:07:C2:68:24:FF:85:95:CB:DB:1E:E3:33:9C:2A:4F:97:20:56:7B
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.twca.com.tw/

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://RootCA.twca.com.tw/TWCARCA/global_revoke_4096.crl

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                CA Issuers - URI:http://sslserver.twca.com.tw/cacert/root4096.crt
                OCSP - URI:http://rootocsp.twca.com.tw/

    Signature Algorithm: sha256WithRSAEncryption
         9e:80:28:1a:d4:04:77:c7:e4:97:cb:3b:7f:10:c2:6c:95:62:
         ed:cb:df:a4:2c:11:da:64:1a:14:1a:78:76:e9:2b:fc:4b:7e:
         bf:9a:98:ee:19:a3:13:68:96:0c:21:9b:fb:d5:58:71:61:da:
         48:ca:f9:35:cd:ff:cd:58:42:58:f1:f2:18:ce:c7:a5:32:d8:
         91:84:91:51:0a:8a:c5:bf:41:29:74:6d:c4:61:e0:be:03:eb:
         6b:19:4a:19:dd:f0:1a:65:7c:c8:53:47:01:09:5d:95:b7:6d:
         1e:72:bf:2f:c3:2e:b3:6e:1d:11:8f:7e:b3:db:d2:fd:fb:2f:
         b9:f0:76:ef:96:30:e5:2f:bf:5e:4a:c1:5f:b6:56:52:3e:72:
         7a:d1:11:85:96:01:88:b1:0e:6d:8d:8c:ad:b2:30:2a:14:8c:
         4b:f0:09:cc:a5:9e:7c:2c:83:80:91:f0:89:78:d5:e0:3b:1b:
         51:d9:80:2d:ea:63:8f:d4:76:0c:ee:d6:28:19:73:14:47:e3:
         a1:e0:e0:7a:ea:73:c3:51:3e:e0:ac:61:13:28:a3:68:e1:ea:
         c1:b3:f7:70:45:68:a6:3e:0d:06:c4:be:5f:dc:1f:9a:b2:2a:
         dc:d9:bf:3e:ed:2c:4b:05:90:a4:4d:92:67:0e:7c:24:0f:ef:
         b7:cc:9b:cf:da:4e:9c:f3:ca:33:af:c4:d2:74:d1:73:03:a3:
         16:3b:23:eb:52:77:fe:97:c7:2e:ff:bc:9d:d5:65:05:f8:98:
         54:a0:f0:d4:e5:22:9d:b2:b6:84:ef:57:57:ee:b3:df:55:d8:
         da:4b:b7:dd:c0:5f:cc:b0:0d:c3:82:99:af:eb:2e:a9:53:f1:
         0b:bb:9d:be:5a:fb:9a:fa:b0:a3:1d:f3:5c:1f:55:62:58:c2:
         77:25:e4:67:b5:dc:bd:a0:a1:ac:be:db:51:1a:15:38:1d:d3:
         1a:7a:07:80:4c:45:9d:d3:b4:01:ff:65:4d:77:df:ee:fc:3e:
         6b:7d:22:66:ac:68:99:4f:02:1f:14:4c:11:70:92:d6:c2:0a:
         62:a6:88:6b:eb:66:42:dc:bc:75:cb:d1:1d:7c:aa:ec:87:63:
         ee:a8:65:b2:9a:d5:e6:59:b1:47:23:0e:81:2b:8f:cb:2d:21:
         df:96:f1:02:bb:c6:90:9b:31:89:e2:c3:be:8d:1f:f8:32:fb:
         96:89:9b:17:10:c4:c7:32:13:70:64:80:c9:cc:6b:8f:93:b0:
         8a:f6:2d:29:27:bc:39:8e:6d:6f:e6:84:c3:00:28:70:5f:01:
         0b:cc:b6:d2:c1:8a:ea:a0:4e:a4:64:19:fe:18:ee:44:87:e2:
         11:7f:05:bb:0e:fb:dc:67