quovadispkioverheidserverca2020.crt: CN=QuoVadis PKIoverheid Server CA 2020,O=QuoVadis Trustlink B.V.,C=NL (Intermediate Certificate, Expiring 2022-12-05) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt" --output cert.crt

Download certificate through wget:

wget -q "http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:52:6a:1d:a9:65:93:d3:45:58:b6:64:a3:21:ca:a8:38:c1:57:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Domein Server CA 2020
        Validity
            Not Before: Jul 29 18:30:06 2020 GMT
            Not After : Dec  5 00:00:00 2022 GMT
        Subject: C=NL, O=QuoVadis Trustlink B.V., CN=QuoVadis PKIoverheid Server CA 2020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:b2:03:4c:c3:e7:1f:c1:93:8e:ed:3e:2b:52:5f:
                    41:78:3f:3c:d5:70:bf:07:8b:8e:4b:ac:ae:a6:e1:
                    06:d5:5e:13:f1:ea:65:fb:e0:a5:14:f3:fc:87:18:
                    f3:20:fd:ad:d6:0e:0e:38:4e:8d:a9:73:6d:cb:c3:
                    e4:e8:fd:ba:16:12:42:3d:4e:eb:12:ee:97:ee:56:
                    09:41:7f:8a:30:14:4e:2d:9e:4f:0e:a7:89:7d:c4:
                    96:06:87:e3:89:24:dc:67:03:9a:f5:40:82:c6:13:
                    c8:ab:9d:c3:2c:08:d2:71:f8:2a:67:af:11:84:e6:
                    64:59:24:13:4f:7f:05:73:59:f6:42:c8:4f:1b:09:
                    5b:87:a8:44:05:06:79:24:1e:c0:97:d2:1c:50:47:
                    49:6f:32:ed:6c:ad:71:14:d2:13:71:25:06:28:f2:
                    35:0c:05:e6:5e:7e:f2:0b:ce:48:6c:37:74:b8:ca:
                    21:b9:2c:01:2c:52:1f:da:d9:50:61:c0:8c:e1:b7:
                    31:00:25:bf:59:12:38:d6:4b:f1:38:8d:92:be:2e:
                    23:28:62:fa:c2:6f:96:71:42:13:ac:e6:4e:95:6a:
                    ef:e9:33:79:d6:b3:bc:3f:5d:5b:bb:25:f6:bc:37:
                    3d:e7:18:e6:42:ee:23:a4:dc:c9:39:d0:c1:0a:c8:
                    d7:41:17:c5:61:7e:10:65:29:89:dd:26:db:34:4b:
                    54:78:11:c5:e0:9d:4d:db:aa:bd:e7:30:63:e3:b7:
                    4d:45:5b:6a:4b:08:70:8b:7c:6e:a9:8d:da:ef:82:
                    cb:17:32:24:81:b7:e2:b0:a9:df:3d:ae:95:04:e0:
                    53:54:b3:60:6d:f2:2e:83:fc:d7:19:c7:b6:02:1d:
                    d5:c4:2a:95:30:50:2c:99:ce:2b:72:03:dc:80:ee:
                    67:59:37:21:85:cd:11:25:d7:69:48:47:3e:ae:85:
                    0e:ba:8d:60:fd:b4:f0:c4:6c:b4:97:f3:e8:87:a2:
                    d0:06:ca:b0:98:05:fd:07:9b:45:75:be:d5:d9:39:
                    9e:84:a9:11:35:e9:56:3c:de:1c:d8:b7:50:b6:ea:
                    1c:22:29:50:3a:eb:a2:b9:3e:3a:25:b3:94:7a:80:
                    aa:97:09:5e:ec:2c:07:f6:02:99:c3:47:49:14:18:
                    78:6d:39:d0:3c:de:e7:8a:1d:b9:c6:bc:14:f4:d7:
                    6e:60:b4:b4:9e:eb:a4:88:04:e0:0c:80:9f:aa:ed:
                    b0:32:35:15:af:fb:4f:1f:d0:6c:f2:45:1a:cd:85:
                    ec:a6:df:52:a7:66:8a:91:c4:b4:22:c0:46:26:0e:
                    6a:be:60:03:27:da:4c:9e:10:7e:05:c0:3e:03:32:
                    3d:9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                CA Issuers - URI:http://cert.pkioverheid.nl/DomeinServerCA2020.cer
                OCSP - URI:http://domserver2020ocsp.pkioverheid.nl

            X509v3 Subject Key Identifier: 
                22:B7:3D:C0:4E:66:6F:58:A8:73:B0:12:DF:FF:BB:D3:8E:13:98:E7
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Authority Key Identifier: 
                keyid:5A:5D:34:25:C1:88:91:73:F9:DE:E1:0C:D5:F4:EA:18:BF:30:34:6E

            X509v3 Certificate Policies: 
                Policy: 2.16.528.1.1003.1.2.5.8
                Policy: 2.16.528.1.1003.1.2.5.9
                  CPS: https://cps.pkioverheid.nl
                Policy: 2.23.140.1.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.pkioverheid.nl/DomeinServerCA2020LatestCRL.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
    Signature Algorithm: sha256WithRSAEncryption
         65:66:75:17:6d:61:18:ea:21:be:09:b2:ec:4d:cb:58:d7:a2:
         d4:27:e9:7b:63:e7:2a:39:3b:96:99:1b:49:79:57:ea:c8:8b:
         2d:23:a8:c1:14:cf:70:7f:f8:c9:1c:4f:18:72:dc:31:4a:bb:
         b7:d0:13:6f:66:db:6a:79:e7:82:37:dd:6a:ab:0b:16:db:b7:
         fb:ba:a9:d8:4b:4e:e2:fd:5a:f2:6f:dc:91:c5:1f:ff:aa:c0:
         89:b6:83:71:4a:bf:78:e6:8f:62:3c:9a:35:a8:55:d3:54:74:
         f4:9a:e1:8c:18:4a:31:3c:f3:0c:00:e9:ae:dc:90:f8:0e:d0:
         5b:e6:e9:c5:7e:bd:2d:80:80:98:c9:f4:42:55:68:63:a6:91:
         42:16:7b:14:43:d7:eb:00:7f:96:12:43:4e:1f:7a:f3:ec:e6:
         58:95:83:0b:7a:8a:c1:7d:db:0e:93:a8:4b:aa:61:c4:c0:73:
         0e:05:d1:a0:e3:17:76:5f:ea:70:ab:76:e7:0c:dd:c4:05:6f:
         ce:17:18:41:4a:0a:8c:10:52:24:1f:26:f1:e9:cc:59:c7:c4:
         7d:ac:2d:e7:1b:6c:f1:3d:cf:72:2c:6f:5f:32:e4:d9:d3:15:
         bc:81:e9:61:a9:ee:43:96:cd:e4:07:76:32:c5:43:1d:06:e0:
         ed:a2:f7:56:25:64:70:00:bc:3e:08:2a:a2:62:ce:51:72:8d:
         94:31:ba:58:5f:69:fb:be:92:2f:08:75:41:41:98:3e:f8:e5:
         4a:be:b5:22:72:d3:e9:6d:ed:2d:1f:13:b7:18:1f:47:7f:0a:
         93:2a:f0:86:55:d7:92:d7:95:42:5e:43:08:78:e0:4e:d8:80:
         5c:6e:a2:cd:b7:d1:c5:23:66:a0:dc:13:6d:c8:b9:c3:f5:4e:
         f1:fb:9c:84:ab:c6:45:78:54:fd:ac:19:9b:8e:91:79:42:7b:
         a4:a3:a1:11:17:65:4b:5e:a9:95:e9:fd:3a:de:67:f3:2d:45:
         56:01:5d:fe:16:18:54:b2:5f:cb:68:d1:d4:05:0e:21:9d:04:
         e9:c1:ae:3d:26:b5:8d:c4:4f:db:d2:01:75:01:9f:26:4e:4b:
         a7:95:62:98:ae:82:7f:17:b9:4d:82:f2:f5:3f:70:db:0c:75:
         73:20:e4:cf:c8:2e:a8:19:8c:ce:16:0c:1b:0b:da:60:c2:3a:
         07:f3:e4:cb:68:a9:e8:50:65:64:52:47:71:be:71:c3:e6:fb:
         0c:ff:55:47:65:53:6e:8a:2b:a3:53:43:bc:b8:29:f0:78:89:
         a8:ae:75:36:0d:e5:3d:f8:50:7f:e9:aa:4a:a1:35:2c:84:82:
         87:33:1f:73:22:50:f9:b5

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06