Microsoft Azure TLS Issuing CA 06 - xsign.crt: CN=Microsoft Azure TLS Issuing CA 06,O=Microsoft Corporation,C=US (Intermediate Certificate, Expiring 2024-06-27) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e7:91:71:fb:80:21:e9:3f:e2:d9:83:83:4c:50:c0
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
        Validity
            Not Before: Jul 29 12:30:00 2020 GMT
            Not After : Jun 27 23:59:59 2024 GMT
        Subject: C=US, O=Microsoft Corporation, CN=Microsoft Azure TLS Issuing CA 06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:b5:46:01:19:79:e9:bc:77:28:15:12:1a:e3:dc:
                    e0:7e:6e:a0:d1:64:14:7e:1e:ee:9b:d3:0b:14:62:
                    e2:3f:fe:cf:e5:db:c2:31:33:fb:90:a2:a4:33:aa:
                    8f:1f:7f:8d:68:ec:90:be:5d:93:b3:da:42:4c:c8:
                    b6:27:6c:00:09:c3:09:6d:65:79:90:4e:22:2e:bc:
                    2d:f7:f5:6e:34:de:66:03:18:8b:07:51:77:76:37:
                    f5:bf:e5:70:6a:62:b8:fd:9d:db:75:bd:e5:81:e4:
                    30:c4:fc:22:55:a8:b1:82:17:d1:fe:24:61:be:b6:
                    ae:98:72:7e:70:23:61:bf:f8:39:df:7d:4e:19:e1:
                    94:0c:46:b5:fb:d2:6d:77:01:54:82:82:61:f6:60:
                    a9:1b:d5:fb:99:51:79:49:dd:d5:a3:63:45:85:73:
                    3c:ea:22:7e:04:b1:d9:f4:72:cb:5f:a9:3b:55:33:
                    68:c3:0d:9c:83:84:ef:56:d5:61:6d:00:d6:1a:f5:
                    f7:0e:e4:39:bd:0a:90:95:e8:00:b4:c3:0e:3d:6e:
                    91:41:03:a9:0b:81:7c:1c:51:78:be:66:5e:2b:b5:
                    3b:b5:86:d2:f9:6d:83:45:59:fd:26:73:72:d0:6c:
                    74:19:71:d4:19:26:59:80:56:db:ad:4a:66:00:62:
                    be:ba:a5:e4:42:d3:28:a7:7c:aa:0b:47:70:b4:00:
                    e5:f9:7a:24:1d:10:82:ce:57:0d:a5:9e:84:df:3a:
                    1a:9b:39:25:6f:00:ae:31:ad:8d:c5:80:20:ff:97:
                    f0:24:1a:59:f6:82:9e:e4:66:e8:19:3f:d3:73:d0:
                    5a:18:1d:8b:ce:2a:c0:0d:2c:b1:17:c5:27:01:d4:
                    3d:33:52:9c:4f:04:88:65:64:d9:fa:ed:d2:ef:0f:
                    1b:5a:70:49:0b:05:b8:d2:5f:71:82:07:12:fd:6f:
                    3b:33:fb:b8:43:ae:0f:27:6c:98:28:e1:97:1b:a8:
                    2b:69:f9:ff:66:95:47:70:4c:4e:ef:a9:e3:e8:25:
                    f1:a9:57:a0:1c:9c:c8:b9:a3:dc:9f:cf:52:0a:83:
                    f1:22:f9:7d:30:94:7a:01:ac:76:26:bf:49:ae:b4:
                    37:6a:15:ee:f4:35:ef:08:cc:37:e2:d7:6b:6a:e3:
                    8f:f6:f8:66:56:60:5d:5a:23:0e:60:23:0f:02:11:
                    74:35:2e:8d:0b:b4:45:5b:09:a8:52:cc:cd:22:07:
                    a6:9d:82:66:9e:e6:22:82:eb:c9:26:b2:d9:86:01:
                    bb:b4:a2:37:02:fd:e5:7e:87:7b:69:12:f1:e7:9f:
                    04:11:e3:cf:05:bf:f4:5c:46:aa:bc:b9:ee:2e:f5:
                    73:67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D5:C1:67:3A:C2:A3:9D:F4:77:52:5B:59:12:38:29:E6:55:68:BB:A5
            X509v3 Authority Key Identifier: 
                keyid:4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2

            1.3.6.1.4.1.311.21.1: 
                ...
    Signature Algorithm: sha384WithRSAEncryption
         76:a1:67:3d:dd:f0:7c:7a:c7:22:ff:c7:ac:8b:18:fe:f8:dd:
         b6:99:e8:86:0e:38:05:fa:b0:36:2d:42:b9:20:e4:0e:81:c5:
         12:4c:62:92:a8:5f:65:61:f0:31:3e:3a:ea:3e:30:c2:50:f1:
         c2:51:1b:fe:db:a6:9d:e4:ff:c1:62:d5:ed:6e:6b:71:25:6b:
         be:71:2e:41:84:c0:cf:3d:e1:b7:a0:f6:70:5d:11:c1:24:50:
         24:63:83:b8:00:5e:d1:20:00:14:5b:a1:33:0d:f9:54:a0:31:
         ca:bf:cd:f3:3a:23:df:60:67:29:1d:cf:6c:93:10:08:9c:27:
         9d:93:b4:12:81:7b:cc:01:18:e3:3a:a7:5a:92:8a:f6:d4:34:
         e6:34:85:28:b7:1a:3c:90:7b:f9:87:04:65:1a:10:49:c2:9b:
         3a:7c:45:62:d4:1b:74:b6:ba:4c:ff:7c:18:c6:5a:f8:ef:75:
         92:3d:41:59:3e:03:f5:8f:9d:7d:90:ba:56:38:9f:33:d3:dc:
         31:6b:2f:81:af:6f:62:ac:f7:01:62:fd:06:31:79:47:a9:38:
         72:f3:2e:26:fc:7c:93:41:e2:36:20:cb:cc:ad:09:f0:a8:fa:
         58:fa:b2:c8:5f:2b:e2:23:6b:cb:a0:8f:b8:c4:a1:38:46:7d:
         fc:65:9f:26

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06