class2g2.crt: CN=certSIGN CA Class 2 G2,OU=certSIGN CA Class 2 G2,O=certSIGN,C=RO (Intermediate Certificate, Expiring 2025-06-10) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://crl.certsign.ro/class2g2.crt" --output cert.crt

Download certificate through wget:

wget -q "http://crl.certsign.ro/class2g2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:06:05:16:70:03:10:ef:3c:9e:c6:dc:4c:f9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RO, O=certSIGN, OU=certSIGN ROOT CA
        Validity
            Not Before: Jun 10 13:33:53 2015 GMT
            Not After : Jun 10 13:33:53 2025 GMT
        Subject: C=RO, O=certSIGN, OU=certSIGN CA Class 2 G2, CN=certSIGN CA Class 2 G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:6d:28:73:77:e5:cc:5c:d6:5f:4f:9c:9d:
                    84:1c:fc:61:f4:60:3c:4d:83:9d:dd:2d:43:65:66:
                    88:52:1c:66:60:30:65:76:3c:59:17:47:a1:86:e0:
                    67:e9:58:ce:56:f4:ea:f4:90:59:d5:d6:e9:0f:2b:
                    84:0c:fa:c5:8d:53:38:d0:25:9f:5b:e8:cc:0f:c3:
                    2c:68:cc:4a:df:35:b9:55:69:a3:c6:3f:ba:3f:af:
                    83:b6:ad:98:a9:bf:c0:0f:5b:09:b9:85:c3:86:6a:
                    36:16:bc:dd:5b:19:36:50:e1:b0:03:e5:6e:35:11:
                    5b:75:df:3c:c3:53:68:a5:60:90:c4:76:46:43:75:
                    6e:71:6b:cb:44:a2:f2:18:fc:5f:8b:34:c3:1f:a7:
                    0a:f7:b8:db:5a:96:83:7c:1e:78:b7:89:3f:03:b5:
                    e3:49:1b:f2:6e:af:10:a8:e4:90:66:2d:97:4d:0c:
                    7a:6c:37:e3:ad:5f:d6:dc:23:20:10:55:c8:cb:e7:
                    4a:46:d0:ab:ac:38:9a:c2:b4:09:47:fe:d8:9c:b5:
                    f2:b4:9c:4f:81:c9:1f:bb:fa:66:0d:04:b7:94:13:
                    ce:37:1e:cb:28:ac:00:cb:b5:1e:f5:22:5e:20:49:
                    cd:7a:cd:05:b1:14:79:c7:51:76:38:d0:5a:2f:fe:
                    45:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.certsign.ro
                CA Issuers - URI:http://www.certsign.ro/certcrl/root.crt

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Authority Key Identifier: 
                keyid:E0:8C:9B:DB:25:49:B3:F1:7C:86:D6:B2:42:87:0B:D0:6B:A0:D9:E4

            X509v3 Subject Key Identifier: 
                45:44:5B:06:21:AA:28:08:86:29:AE:09:CF:9D:42:7F:52:42:7B:19
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.25017.1.1.2
                  CPS: http://www.certsign.ro/repository

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.certsign.ro/root.crl

    Signature Algorithm: sha256WithRSAEncryption
         a9:fe:f7:67:32:0d:ab:db:84:65:be:3b:5f:6d:a7:18:8d:c9:
         ba:64:0c:31:95:2a:9b:16:8d:3e:f0:9f:50:14:83:c2:2b:e2:
         67:2c:30:16:4e:a0:17:c0:44:01:15:0a:71:e9:18:a1:0e:2e:
         e4:9c:9a:df:12:f8:b9:c0:21:04:e6:67:59:13:48:0a:f4:7c:
         6a:5b:5e:e6:c5:84:87:99:a7:01:37:a9:ff:28:25:f7:5a:8e:
         65:49:44:08:b6:a8:99:bb:d6:5c:bd:0a:fc:0a:bd:34:33:89:
         f2:bb:94:f7:cf:0f:8e:a1:18:ea:81:29:b3:c6:80:4e:d5:f7:
         1e:2b:ee:43:27:db:38:8c:09:79:24:2e:5c:9c:55:7b:da:2b:
         12:60:21:01:29:cd:7b:5d:10:8c:dd:50:18:bd:8d:8c:03:7a:
         fe:ea:20:64:81:a7:6f:6d:2e:6d:aa:6c:22:84:83:c6:28:41:
         00:49:fd:e3:14:8a:9a:c2:c9:0d:45:87:b5:77:3d:24:45:42:
         43:42:14:3c:a9:c3:a5:7c:a2:98:42:ee:e8:24:25:be:d2:c9:
         b0:c4:46:10:02:5e:b7:b9:9b:be:86:c1:36:a3:5c:8a:75:11:
         9a:5e:7f:02:88:16:f7:9f:1b:0c:f7:e6:3f:bb:ac:ed:b8:18:
         c5:0b:f1:8d

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06