gtsr4_old.der: CN=GTS Root R4,O=Google Trust Services LLC,C=US (Root Certificate, Expiring 2036-06-22) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Certificate Download URL: https://pki.goog/repo/certs/gtsr4_old.der (in DER format )
Serial Number : 146587176229350439916519468929765261721
SHA-1 Fingerprint : 2a1d6027d94ab10a1c4d915ccd33a0cb3e2d54cb
SHA-1 Fingerprint : 2a:1d:60:27:d9:4a:b1:0a:1c:4d:91:5c:cd:33:a0:cb:3e:2d:54:cb
SHA-256 Fingerprint : 71cca5391f9e794b04802530b363e121da8a3043bb26662fea4dca7fc951a4bd
SHA-256 Fingerprint : 71:cc:a5:39:1f:9e:79:4b:04:80:25:30:b3:63:e1:21:da:8a:30:43:bb:26:66:2f:ea:4d:ca:7f:c9:51:a4:bd
Signature Hash Algorithm : sha384
Subject : CN=GTS Root R4,O=Google Trust Services LLC,C=US
- Country Name: US (United States of America)
- Organization: Google Trust Services LLC
- Common Name: GTS Root R4
Not Valid Before: 2016-06-22 00:00:00
Not Valid After: 2036-06-22 00:00:00
Issuer (Parent Certificate):
- Issuer Name: CN=GTS Root R4,O=Google Trust Services LLC,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Root Certificate
- Certificate Policy (CP) URL: https://pki.goog/repo/cp/3.4/GTS-CP.pdf
- Certificate Practice Statement (CPS) URL: https://pki.goog/repo/cps/4.13/GTS-CPS.pdf
- Auditor: Ernst & Young, LLP
- Standard Audit URL: https://www.cpacanada.ca//GenericHandlers/CPACHandler.ashx?AttachmentID=4525b841-06ec-4ec8-9cae-ad27ee4e19a9
- Standard Audit Period Start Date: 2021.10.01
- Standard Audit Period End Date: 2022.09.30
- Standard Audit Statement Date: 2022.10.31
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://crl.pki.goog/gtsr4/gtsr4.crl

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/gtsr4_old.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/gtsr4_old.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:47:a9:c8:8b:94:b6:e8:bb:3b:2a:d8:a2:b2:c1:99
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS Root R4
        Validity
            Not Before: Jun 22 00:00:00 2016 GMT
            Not After : Jun 22 00:00:00 2036 GMT
        Subject: C=US, O=Google Trust Services LLC, CN=GTS Root R4
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:f3:74:73:a7:68:8b:60:ae:43:b8:35:c5:81:30:
                    7b:4b:49:9d:fb:c1:61:ce:e6:de:46:bd:6b:d5:61:
                    18:35:ae:40:dd:73:f7:89:91:30:5a:eb:3c:ee:85:
                    7c:a2:40:76:3b:a9:c6:b8:47:d8:2a:e7:92:91:6a:
                    73:e9:b1:72:39:9f:29:9f:a2:98:d3:5f:5e:58:86:
                    65:0f:a1:84:65:06:d1:dc:8b:c9:c7:73:c8:8c:6a:
                    2f:e5:c4:ab:d1:1d:8a
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C
    Signature Algorithm: ecdsa-with-SHA384
         30:64:02:30:6a:50:52:74:08:c4:70:dc:9e:50:74:21:e8:8d:
         7a:21:c3:4f:96:6e:15:d1:22:35:61:2d:fa:08:37:ee:19:6d:
         ad:db:b2:cc:7d:07:34:f5:60:19:2c:b5:34:d9:6f:20:02:30:
         03:71:b1:ba:a3:60:0b:86:ed:9a:08:6a:95:68:9f:e2:b3:e1:
         93:64:7c:5e:93:a6:df:79:2d:8d:85:e3:94:cf:23:5d:71:cc:
         f2:b0:4d:d6:fe:99:c8:94:a9:75:a2:e3

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates