Microsoft EV RSA Root Certificate Authority 2017.crt: CN=Microsoft EV RSA Root Certificate Authority 2017,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US (Root Certificate, Expiring 2042-07-26) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://www.microsoft.com/pkiops/certs/archived/Microsoft%20EV%20RSA%20Root%20Certificate%20Authority%202017.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www.microsoft.com/pkiops/certs/archived/Microsoft%20EV%20RSA%20Root%20Certificate%20Authority%202017.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fc:eb:6d:f7:cf:57:84:41:84:bd:d9:e0:22:8e:98
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft EV RSA Root Certificate Authority 2017
        Validity
            Not Before: Jul 26 21:41:53 2017 GMT
            Not After : Jul 26 21:47:58 2042 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft EV RSA Root Certificate Authority 2017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:a7:04:41:25:bf:e5:be:91:16:41:3f:de:f8:b4:
                    91:2a:43:3f:a8:8d:0f:fe:c8:9a:18:76:4e:60:28:
                    b9:f6:c0:71:65:d5:95:94:27:4b:4d:6d:6c:f7:53:
                    20:d6:a1:e8:c2:80:36:60:b2:4d:34:58:60:27:df:
                    58:34:9f:ff:ec:de:87:ab:d7:aa:fc:e8:73:69:30:
                    4f:c4:4e:29:34:0d:7d:44:9d:4a:d3:75:6e:e7:c2:
                    21:fd:5a:dd:87:a7:2b:4c:ca:f6:78:a4:86:26:02:
                    ab:8d:dd:89:40:6b:76:e9:f6:b5:da:61:15:87:43:
                    5d:b5:a3:93:82:47:b1:52:a1:ea:97:ba:c2:05:de:
                    21:e1:90:7b:27:9c:37:35:02:cb:ff:eb:17:00:87:
                    96:6c:44:34:fe:e7:b8:50:bb:f9:46:4f:9a:31:8f:
                    d8:54:5f:46:f0:5e:ca:25:44:35:e4:55:fc:94:64:
                    49:4d:2d:fe:12:26:f7:7e:72:16:67:98:fe:92:a5:
                    03:3f:70:59:2c:64:5d:6a:63:9d:91:bf:23:3b:4a:
                    55:9a:b1:c1:24:25:8d:4e:b0:1f:f5:31:c8:1b:95:
                    ce:50:cc:4b:d1:2c:64:18:94:d1:28:67:8b:0a:a4:
                    d9:1b:18:9b:af:aa:47:c6:26:9e:0a:31:35:5a:c6:
                    39:a3:2c:dd:9b:43:8f:fa:f4:8d:f5:23:c7:07:4f:
                    89:69:9a:d6:03:6d:d3:63:59:20:e8:33:99:59:b0:
                    50:29:dc:89:ef:51:54:5a:a8:d8:ee:2c:7d:aa:d9:
                    89:92:61:b8:ff:aa:4b:0c:bc:53:fb:26:46:dd:51:
                    9d:3c:5c:60:09:c0:01:6b:59:ad:83:56:5b:53:fb:
                    a0:ab:26:ad:cc:d9:ff:3e:78:2e:3b:6b:f3:45:c1:
                    03:e8:c2:93:5c:fe:95:0b:92:5c:8b:9c:b4:b3:dc:
                    3a:46:ac:00:b8:27:09:0a:3e:35:ee:43:06:ef:1a:
                    94:08:29:e6:51:f1:e3:2e:fa:44:e3:25:cd:8b:17:
                    fb:c6:cb:0a:fa:0c:b2:1e:f4:6e:0e:0b:80:3b:e9:
                    5f:02:89:8b:b7:34:be:24:8e:bc:3d:eb:55:c9:b1:
                    9d:2b:25:31:ca:fc:f7:2d:e6:6b:01:76:8e:ec:9a:
                    00:d7:6e:87:3e:bc:12:b8:25:cb:c9:61:0f:85:18:
                    11:ab:27:83:4c:49:2e:2c:fc:57:b1:c7:e9:c2:07:
                    ce:eb:b7:b5:c3:dd:96:ef:07:12:d0:de:fe:84:c0:
                    e7:8e:77:f3:d1:78:b0:36:5e:e4:80:2d:fe:da:ed:
                    52:05:02:a9:75:b1:83:52:e0:97:f2:9f:17:42:3f:
                    ee:da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                41:CA:FF:16:B2:09:4E:DC:24:C8:4B:E4:5C:16:25:99:F8:26:EF:3B
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                Policy: 1.3.6.1.4.1.311.76.509.1.1
                  CPS: http://www.microsoft.com/pkiops/Docs/Repository.htm

    Signature Algorithm: sha384WithRSAEncryption
         70:55:0a:42:b6:17:18:2b:2f:87:12:89:fc:cc:4f:2b:67:3e:
         4c:c6:21:fa:8d:78:4d:fc:23:84:b0:df:4f:79:8f:b0:d7:da:
         e1:65:70:3f:31:76:ed:70:84:33:4d:c0:2d:38:91:dd:4b:b5:
         d9:41:4d:46:ab:6f:18:3a:ea:bb:85:68:61:d3:67:a3:9d:dc:
         67:34:f4:f9:dc:cd:dc:65:24:14:7a:9e:52:7b:d3:83:f9:8e:
         db:01:cd:42:2d:02:48:2b:9a:ab:8b:d5:2b:0c:32:23:a0:c3:
         7a:94:1a:92:72:5a:b6:6b:8a:1d:d4:b9:43:80:7b:e9:d5:fb:
         42:f5:c9:36:52:2f:19:fd:01:f6:00:ee:c9:d1:6b:4d:2b:9d:
         0b:45:a3:48:f9:60:39:4e:c1:f4:9e:83:7e:78:0e:c8:b2:38:
         08:e4:1f:0b:3e:9e:2e:32:a6:88:6f:9f:bb:e7:9f:c7:f7:f8:
         85:e7:24:12:a0:79:97:40:b9:df:57:ee:15:d0:95:b3:9d:59:
         61:5f:15:9d:8c:cc:33:80:48:8c:15:e6:77:dd:6b:1a:cc:78:
         d9:b4:ce:b6:4a:f4:fc:42:34:13:2d:10:c3:a5:91:73:4b:64:
         dd:5b:67:0a:ad:13:2a:44:6b:89:2b:d5:92:3c:06:05:0a:7c:
         6b:e3:87:4e:8c:8f:30:e5:16:25:1c:6d:97:51:5f:1a:f5:dd:
         43:c2:14:00:1d:dd:dd:be:b1:ea:8a:4b:3c:68:fc:3a:d1:52:
         43:ff:16:75:a7:04:a8:c0:87:b4:3c:58:91:f8:6f:c6:89:14:
         96:ae:a1:b6:29:df:3a:41:9e:17:fd:49:24:6f:fd:f8:03:9e:
         90:18:d1:86:7e:99:da:94:b3:ed:1f:fe:0a:70:1e:ef:5a:19:
         6f:3f:e8:4f:22:99:20:82:af:e2:87:c8:ba:60:48:ec:89:dd:
         c1:b0:98:c9:90:48:2f:88:a6:e4:cc:b5:21:70:85:77:12:55:
         5c:81:75:53:35:6f:35:c5:9c:f2:39:13:33:3b:1a:93:83:11:
         3f:53:dc:ab:0a:3d:4f:f7:b7:8e:05:3f:0f:66:60:39:62:0f:
         a1:60:a2:d2:a2:2f:70:e7:8f:9b:38:9b:8d:51:31:98:7f:6a:
         60:20:8f:07:69:6f:92:fd:c1:d2:71:ff:dc:3c:51:93:19:c6:
         e8:75:8a:74:fe:8a:ae:61:fa:a4:1b:64:c7:e4:1c:2a:0d:de:
         38:f5:df:34:6d:c6:79:83:d6:50:7c:90:d2:05:5e:2b:db:4d:
         99:17:b0:db:6d:d2:63:cf:29:ba:89:3a:6d:2c:14:6c:c5:5c:
         ae:34:86:fb:93:9f:a9:76

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIGZzCCBE+gAwIBAgIQGfzrbffPV4RBhL3Z4CKOmDANBgkqhkiG9w0BAQwFADCB
jzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl
ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjE5MDcGA1UEAxMw
TWljcm9zb2Z0IEVWIFJTQSBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDE3
MB4XDTE3MDcyNjIxNDE1M1oXDTQyMDcyNjIxNDc1OFowgY8xCzAJBgNVBAYTAlVT
MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK
ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xOTA3BgNVBAMTME1pY3Jvc29mdCBFViBS
U0EgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxNzCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAKcEQSW/5b6RFkE/3vi0kSpDP6iND/7Imhh2TmAo
ufbAcWXVlZQnS01tbPdTINah6MKANmCyTTRYYCffWDSf/+zeh6vXqvzoc2kwT8RO
KTQNfUSdStN1bufCIf1a3YenK0zK9nikhiYCq43diUBrdun2tdphFYdDXbWjk4JH
sVKh6pe6wgXeIeGQeyecNzUCy//rFwCHlmxENP7nuFC7+UZPmjGP2FRfRvBeyiVE
NeRV/JRkSU0t/hIm935yFmeY/pKlAz9wWSxkXWpjnZG/IztKVZqxwSQljU6wH/Ux
yBuVzlDMS9EsZBiU0Shniwqk2RsYm6+qR8YmngoxNVrGOaMs3ZtDj/r0jfUjxwdP
iWma1gNt02NZIOgzmVmwUCncie9RVFqo2O4sfarZiZJhuP+qSwy8U/smRt1RnTxc
YAnAAWtZrYNWW1P7oKsmrczZ/z54Ljtr80XBA+jCk1z+lQuSXIuctLPcOkasALgn
CQo+Ne5DBu8alAgp5lHx4y76ROMlzYsX+8bLCvoMsh70bg4LgDvpXwKJi7c0viSO
vD3rVcmxnSslMcr89y3mawF2juyaANduhz68Ergly8lhD4UYEasng0xJLiz8V7HH
6cIHzuu3tcPdlu8HEtDe/oTA545389F4sDZe5IAt/trtUgUCqXWxg1Lgl/KfF0I/
7tprAgMBAAGjgbwwgbkwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8w
HQYDVR0OBBYEFEHK/xayCU7cJMhL5FwWJZn4Ju87MBAGCSsGAQQBgjcVAQQDAgEA
MGUGA1UdIAReMFwwBgYEVR0gADBSBgwrBgEEAYI3TIN9AQEwQjBABggrBgEFBQcC
ARY0aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRv
cnkuaHRtADANBgkqhkiG9w0BAQwFAAOCAgEAcFUKQrYXGCsvhxKJ/MxPK2c+TMYh
+o14TfwjhLDfT3mPsNfa4WVwPzF27XCEM03ALTiR3Uu12UFNRqtvGDrqu4VoYdNn
o53cZzT0+dzN3GUkFHqeUnvTg/mO2wHNQi0CSCuaq4vVKwwyI6DDepQaknJatmuK
HdS5Q4B76dX7QvXJNlIvGf0B9gDuydFrTSudC0WjSPlgOU7B9J6DfngOyLI4COQf
Cz6eLjKmiG+fu+efx/f4heckEqB5l0C531fuFdCVs51ZYV8VnYzMM4BIjBXmd91r
Gsx42bTOtkr0/EI0Ey0Qw6WRc0tk3VtnCq0TKkRriSvVkjwGBQp8a+OHToyPMOUW
JRxtl1FfGvXdQ8IUAB3d3b6x6opLPGj8OtFSQ/8WdacEqMCHtDxYkfhvxokUlq6h
tinfOkGeF/1JJG/9+AOekBjRhn6Z2pSz7R/+CnAe71oZbz/oTyKZIIKv4ofIumBI
7IndwbCYyZBIL4im5My1IXCFdxJVXIF1UzVvNcWc8jkTMzsak4MRP1Pcqwo9T/e3
jgU/D2ZgOWIPoWCi0qIvcOePmzibjVExmH9qYCCPB2lvkv3B0nH/3DxRkxnG6HWK
dP6KrmH6pBtkx+QcKg3eOPXfNG3GeYPWUHyQ0gVeK9tNmRew223SY88puok6bSwU
bMVcrjSG+5OfqXY=
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06