subcar2i2.der: CN=CA Disig R2I2 Certification Service,O=Disig a.s.,L=Bratislava,C=SK (Intermediate Certificate, Expiring 2029-09-28) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://cdp1.disig.sk/subcar2i2/cert/subcar2i2.der" --output cert.crt

Download certificate through wget:

wget -q "http://cdp1.disig.sk/subcar2i2/cert/subcar2i2.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:17:92:52:36:68:f5:c8:50:00:00:00:00:00:00:00:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Root R2
        Validity
            Not Before: Oct  2 12:19:06 2014 GMT
            Not After : Sep 28 12:19:06 2029 GMT
        Subject: C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig R2I2 Certification Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:c9:15:18:1a:e4:a2:85:bc:cd:65:18:b1:
                    1f:16:28:d0:39:6d:a5:a4:0f:a3:ca:b8:c5:cb:de:
                    68:bd:96:df:ee:d1:6d:49:e5:bd:85:22:3b:56:26:
                    de:8f:05:99:4c:19:c9:f3:09:04:84:0b:c0:28:ff:
                    d1:d9:41:0c:30:02:db:4b:82:67:1d:05:2c:32:21:
                    e9:c3:32:ec:62:33:55:9b:9d:9f:b9:92:65:27:2a:
                    31:ec:f8:b6:91:3a:ad:ef:04:22:33:74:60:d0:1a:
                    82:40:08:41:6c:26:e1:69:0c:64:17:ad:50:ed:97:
                    38:61:46:59:8c:d1:bb:32:25:12:70:a7:a8:8b:df:
                    53:82:9c:60:73:fe:c8:f9:fe:bb:a0:9d:61:41:f5:
                    73:70:51:21:5c:69:fc:d3:2f:09:68:f0:e2:3f:80:
                    88:61:5d:04:9d:93:c5:a3:ac:5b:d0:74:6d:53:8a:
                    a9:08:a2:39:bd:33:3e:5a:ea:9c:df:37:d3:67:71:
                    96:c6:57:85:da:d5:c5:7f:a0:c1:b8:7d:90:2a:bb:
                    bf:97:ee:d9:55:3c:f0:c5:df:fe:d4:2b:34:91:1b:
                    27:6b:4a:15:9c:e2:d3:ce:39:13:de:bd:c4:fa:fd:
                    74:27:a6:a1:ab:07:cf:6c:c6:fb:64:9b:69:42:b2:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://rootcar2-ocsp.disig.sk/ocsp/rootcar2
                CA Issuers - URI:http://www.disig.sk/rootcar2/cert/rootcar2.der

            X509v3 Subject Key Identifier: 
                24:A5:BC:3A:28:62:15:42:32:F9:30:5A:C9:F1:3E:E4:A1:09:A8:B1
            X509v3 Authority Key Identifier: 
                keyid:B5:99:F8:AF:B0:94:F5:E3:20:D6:0A:AD:CE:4E:56:A4:2E:6E:42:ED

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://cdp1.disig.sk/rootcar2/crl/rootcar2.crl

                Full Name:
                  URI:http://cdp2.disig.sk/rootcar2/crl/rootcar2.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.disig.sk/cps/

            X509v3 Subject Alternative Name: 
                email:spravaca@disig.sk
    Signature Algorithm: sha256WithRSAEncryption
         4a:05:41:8b:0a:6e:d4:63:11:d6:d6:7a:a6:47:84:91:7c:71:
         17:20:eb:a1:d4:63:4c:c3:3a:4b:16:66:91:b3:4c:e2:fb:2b:
         b3:c6:68:95:51:ac:cc:48:88:88:86:de:11:54:fc:26:16:42:
         55:64:dc:d8:e2:52:8d:53:de:6d:36:4e:09:16:7d:c5:ec:c8:
         46:76:31:55:e9:22:64:a5:e5:f8:2c:0d:f2:3f:e7:f2:0d:08:
         68:77:f5:89:0d:e5:8f:75:c8:4d:1b:0e:b2:54:6b:fb:93:69:
         da:52:dd:f7:78:bc:ac:e6:87:2e:6a:46:c9:76:40:5b:76:f5:
         00:ee:ee:9f:cd:52:2e:6b:a2:39:ec:d5:f0:aa:cc:fb:1e:ad:
         9c:af:72:20:06:fe:16:12:f2:de:02:dc:62:0e:2b:6a:f0:9f:
         4f:67:64:af:9d:bb:91:aa:b9:25:fc:f4:a6:95:28:ce:94:c9:
         2a:93:fa:32:17:cf:28:53:c2:75:db:11:a6:c5:19:23:15:96:
         65:bf:7c:a9:46:18:b8:44:4f:a8:d8:3d:49:c6:8d:ef:db:d2:
         a3:ef:1a:6b:af:62:93:42:ef:3b:42:1d:c9:cd:75:f1:8b:a4:
         1e:0b:e8:fb:b1:b6:7e:71:71:84:ec:c2:1d:43:f2:b6:90:bc:
         0a:c3:16:8a:8f:c0:e4:2b:d9:78:20:a9:4f:ad:d2:4b:6e:e8:
         82:88:7c:89:e1:07:85:a3:1a:00:0c:af:76:86:ca:83:6a:29:
         2b:fd:43:36:e1:f2:f9:1d:21:ee:fe:97:02:01:89:eb:ca:ff:
         ed:38:ab:e1:6c:8b:92:41:cd:30:14:ba:62:d0:66:14:bd:79:
         77:7e:d3:ae:46:17:fd:0e:f7:40:f9:7d:2d:18:e5:67:3b:9d:
         a3:10:ef:fa:3d:4f:ef:61:23:10:b8:04:89:be:da:0d:0a:b4:
         be:37:48:f1:7e:8d:da:ab:2e:35:1f:7b:bf:e6:5b:26:48:bc:
         42:aa:96:4e:97:e8:25:23:47:1f:5f:55:cd:35:b8:ee:60:53:
         22:c7:31:2a:16:02:d2:32:18:1b:66:0d:45:42:ed:ec:6e:e2:
         af:01:1d:40:cc:41:da:d9:ca:12:4e:27:d4:db:37:65:e2:fb:
         3f:01:86:9a:a8:b0:63:de:ed:44:ed:44:1d:ff:52:63:2c:6c:
         48:1b:7c:82:1b:e6:63:30:9f:1e:93:b6:71:79:af:e1:4b:89:
         ec:3c:05:e4:1c:0f:bf:bb:ef:af:2b:c3:4f:8b:69:d7:70:88:
         a9:66:18:18:d8:bc:dc:be:7b:57:12:94:99:75:64:15:ed:1f:
         39:63:e7:b2:4e:0f:db:b4

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06