ovoca.cer: CN=CFCA OV OCA,O=China Financial Certification Authority,C=CN (Intermediate Certificate, Expiring 2029-12-25) detail info and audit record
Page content
CA Certificate Information and Audit Record
This certificate is intermediate certificate used for the issuance of other certificates.
- Certificate Download URL: http://gtc.cfca.com.cn/ovoca/ovoca.cer (in DER format )
- Serial Number : 1179990579306679759178626
- SHA-1 Fingerprint : 46b0aec933a626f673bafb7441c95869ea943146
- SHA-1 Fingerprint : 46:b0:ae:c9:33:a6:26:f6:73:ba:fb:74:41:c9:58:69:ea:94:31:46
- SHA-256 Fingerprint : f07bbbde076f9b40c57cc4befede97ca1f53b9ae147f035d284cbf53f3432fb8
- SHA-256 Fingerprint : f0:7b:bb:de:07:6f:9b:40:c5:7c:c4:be:fe:de:97:ca:1f:53:b9:ae:14:7f:03:5d:28:4c:bf:53:f3:43:2f:b8
- Signature Hash Algorithm : sha256
- Subject
: CN=CFCA OV OCA,O=China Financial Certification Authority,C=CN
- Country Name: CN (China)
- Organization: China Financial Certification Authority
- Common Name: CFCA OV OCA
- Not Valid Before: 2015-03-25 02:02:56
- Not Valid After: 2029-12-25 02:02:56
- Issuer (Parent Certificate):
- Issuer Name: CN=CFCA EV ROOT,O=China Financial Certification Authority,C=CN
- Issuer Certificate URL: NA
- Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=CFCA EV ROOT,O=China Financial Certification Authority,C=CN .
Download certificate through curl
:
curl -sSL "http://gtc.cfca.com.cn/ovoca/ovoca.cer" --output cert.crt
Download certificate through wget
:
wget -q "http://gtc.cfca.com.cn/ovoca/ovoca.cer" --output-document=cert.crt
CA Certificate Detail Information
Use openssl x509
to decode DER certificate to get detail information:
openssl x509 -in cert.crt -inform der -text -noout
Use openssl x509
to decode PEM certificate to get detail information:
openssl x509 -in cert.crt -inform pem -text -noout
Decoded detail certificate information:
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f9:df:6a:df:f5:64:be:a6:8b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=CN, O=China Financial Certification Authority, CN=CFCA EV ROOT
Validity
Not Before: Mar 25 02:02:56 2015 GMT
Not After : Dec 25 02:02:56 2029 GMT
Subject: C=CN, O=China Financial Certification Authority, CN=CFCA OV OCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d7:8c:53:cb:46:c7:ce:46:9e:c8:00:9e:ab:
aa:f2:7f:1c:46:e7:36:53:d5:f0:8b:e2:59:b0:ee:
c9:3a:49:59:8e:28:d7:c4:eb:41:9f:ed:6e:a8:ae:
4b:2b:15:52:1b:20:c2:be:56:b6:29:f9:a6:32:85:
27:2a:f0:42:53:f7:15:c1:81:72:b6:1e:ab:69:68:
31:8e:79:c9:6c:a4:9b:dc:b3:ea:d7:9f:db:65:4f:
bf:3d:34:1a:77:8b:95:3e:9c:b1:3d:33:56:d1:08:
74:b1:dc:7c:ee:f2:9e:c0:7a:a9:65:a2:ef:bc:9d:
9d:9e:81:a5:5b:58:52:f5:cc:2d:49:10:db:a9:49:
22:3d:62:36:de:7e:16:f4:eb:2f:d3:57:14:34:c7:
86:6d:cf:03:f0:2d:c7:7c:35:4b:52:ae:e9:5d:a2:
5c:4f:6e:14:1e:09:93:49:30:fa:b5:18:a3:31:85:
de:69:0f:06:38:98:22:b1:0d:ea:da:aa:14:cd:5e:
e8:bd:01:e7:f7:ab:28:b6:21:cf:44:5e:67:4d:3c:
04:64:64:95:36:5d:32:7d:14:9f:83:13:e0:a1:68:
8b:df:27:f5:70:41:f3:34:78:69:41:9f:f4:80:69:
ab:f9:e2:30:66:46:77:9c:3d:e0:fa:61:fa:6e:88:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
Authority Information Access:
OCSP - URI:http://ocsp.cfca.com.cn/ocsp
X509v3 Authority Key Identifier:
keyid:E3:FE:2D:FD:28:D0:0B:B5:BA:B6:A2:C4:BF:06:AA:05:8C:93:FB:2F
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Certificate Policies:
Policy: X509v3 Any Policy
CPS: http://www.cfca.com.cn/us/us-12.htm
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.cfca.com.cn/evrca/RSA/crl1.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Key Identifier:
66:B3:EF:FB:54:95:87:E9:AC:A5:96:56:AE:E6:7D:ED:3A:D0:43:D1
X509v3 Extended Key Usage:
TLS Web Client Authentication, E-mail Protection, TLS Web Server Authentication
Signature Algorithm: sha256WithRSAEncryption
ca:11:1f:2a:70:19:99:18:e1:bc:18:e2:7a:ef:45:56:39:28:
37:52:8b:ce:a1:ce:ff:c7:3d:a6:13:e7:a7:c8:47:12:c2:7f:
f4:42:b2:fc:0b:90:d2:03:a9:cc:bc:13:2b:09:61:32:b5:83:
e8:7c:64:14:5d:3c:2d:96:ee:fc:18:bc:58:36:7d:c0:fd:1b:
73:73:32:7e:fc:15:c8:86:87:b7:68:e4:f8:b5:0f:b6:b3:db:
eb:15:17:c8:5e:ce:02:92:6a:87:85:f6:12:bc:0a:e8:91:d6:
b2:62:60:5d:ef:ca:6c:23:04:b9:2c:25:33:18:a4:a7:ef:2f:
14:98:08:28:c6:2c:bb:46:da:d5:b7:97:35:c2:f2:72:7a:e6:
24:d5:9d:65:f0:c3:75:b3:33:eb:98:06:f8:1d:2f:c3:aa:70:
7e:d2:a7:61:14:6b:df:3b:2b:fb:96:0e:bf:c2:52:00:90:df:
38:70:79:4a:34:2d:c9:bf:21:47:68:22:00:ca:14:cf:82:35:
1a:c9:4b:c1:28:52:bb:5f:03:7d:ba:d2:17:97:62:f7:21:95:
fb:cd:fc:46:4b:f2:7d:f9:97:8d:c3:26:e5:40:a9:9d:fc:c2:
b2:74:9b:bd:02:4e:be:64:c2:cb:82:39:42:16:48:a1:24:89:
fd:52:bf:0c:d8:a4:22:83:3e:d8:3c:35:48:26:33:ad:4b:b9:
63:39:05:46:87:cf:0b:3d:49:d0:d5:f0:58:ed:1c:1a:81:f8:
9c:4b:fc:5c:94:83:a7:69:78:68:c9:6c:e0:ec:47:10:fd:3d:
7f:3b:81:64:a4:ca:8a:b8:ea:de:68:8e:4d:13:18:c0:4f:c7:
0a:8b:3c:98:db:07:0e:39:72:88:62:b8:b7:13:09:db:9b:ed:
34:21:a6:18:6a:24:11:19:44:7a:a7:31:45:2b:17:45:31:b4:
ad:0a:d2:38:39:b3:7e:03:db:41:ed:c9:c1:09:6e:2f:cf:7b:
00:25:df:ce:82:62:c5:df:c5:d3:6b:ef:e4:9b:77:35:9d:03:
9f:84:21:ac:ea:4c:76:85:e3:7f:0e:01:40:73:e3:fb:95:d3:
9b:a3:f9:20:19:0b:51:ea:da:f4:da:0c:97:08:55:a7:2c:cb:
53:d3:e0:a8:34:e6:34:a3:74:fe:2d:b1:2a:61:e2:8b:5b:ba:
76:f4:6f:6c:80:78:28:a8:b1:62:6d:63:4c:48:a1:b5:42:f7:
af:92:18:d4:30:e0:ff:83:8f:1f:fe:73:12:62:c6:d4:fb:ec:
84:68:bb:e3:bd:11:db:6f:93:8d:20:f9:1c:13:6f:13:46:14:
10:2a:60:ca:23:e0:d1:22
CA Certificate in PEM Format
Use openssl x509
to convert certificate from DER
format to PEM
format:
openssl x509 -in cert.crt -inform der
Converted PEM
format certificate:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Also see Top 1 Millions Domains CA Certificate List