root_ca_3_pem.crt: CN=Hongkong Post Root CA 3,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Root Certificate, Expiring 2042-06-03) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Certificate Download URL: http://www1.ecert.gov.hk/root/root_ca_3_pem.crt (in PEM format )
Serial Number : 46170865288971385588281144162979347873371282084
SHA-1 Fingerprint : 58a2d0ec2052815bc1f3f86402244ec28e024b02
SHA-1 Fingerprint : 58:a2:d0:ec:20:52:81:5b:c1:f3:f8:64:02:24:4e:c2:8e:02:4b:02
SHA-256 Fingerprint : 5a2fc03f0c83b090bbfa40604b0988446c7636183df9846e17101a447fb8efd6
SHA-256 Fingerprint : 5a:2f:c0:3f:0c:83:b0:90:bb:fa:40:60:4b:09:88:44:6c:76:36:18:3d:f9:84:6e:17:10:1a:44:7f:b8:ef:d6
Signature Hash Algorithm : sha256
Subject : CN=Hongkong Post Root CA 3,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK
- Country Name: HK (Hong Kong)
- State or Province Name: Hong Kong
- Locality: Hong Kong
- Organization: Hongkong Post
- Common Name: Hongkong Post Root CA 3
Not Valid Before: 2017-06-03 02:29:46
Not Valid After: 2042-06-03 02:29:46
Issuer (Parent Certificate):
- Issuer Name: CN=Hongkong Post Root CA 3,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Root Certificate
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: https://www.ecert.gov.hk/product/cps/ecert/img/server_cps_en15.pdf
- Auditor: PwC - PricewaterhouseCoopers International Limited
- Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=19f66d05-8f61-4753-8b97-b5121e9f3d4f
- Standard Audit Period Start Date: 2021.01.01
- Standard Audit Period End Date: 2021.12.31
- Standard Audit Statement Date: 2022.02.28
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://crl1.ecert.gov.hk/crl/RootCA3ARL.crl

Download certificate through curl:

curl -sSL "http://www1.ecert.gov.hk/root/root_ca_3_pem.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www1.ecert.gov.hk/root/root_ca_3_pem.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:16:5f:8a:4c:a5:ec:00:c9:93:40:df:c4:c6:ae:23:b8:1c:5a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 3
        Validity
            Not Before: Jun  3 02:29:46 2017 GMT
            Not After : Jun  3 02:29:46 2042 GMT
        Subject: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:b3:88:d7:ea:ce:0f:20:4e:be:e6:d6:03:6d:ee:
                    59:fc:c2:57:df:29:68:a1:83:0e:3e:68:c7:68:58:
                    9c:1c:60:4b:89:43:0c:b9:d4:15:b2:ee:c1:4e:75:
                    e9:b5:a7:ef:e5:e9:35:99:e4:cc:1c:e7:4b:5f:8d:
                    33:30:20:33:53:d9:a6:bb:d5:3e:13:8e:e9:1f:87:
                    49:ad:50:2d:50:ca:18:be:01:58:a2:13:70:96:bb:
                    89:88:56:80:5c:f8:bd:2c:3c:e1:4c:57:88:bb:d3:
                    b9:95:ef:cb:c7:f6:da:31:74:28:a6:e6:54:89:f5:
                    41:31:ca:e5:26:1a:cd:82:e0:70:da:3b:29:bb:d5:
                    03:f5:99:ba:55:f5:64:d1:60:0e:b3:89:49:b8:8a:
                    2f:05:d2:84:45:28:7c:8f:68:50:12:78:fc:0b:b5:
                    53:cb:c2:98:1c:84:a3:9e:b0:be:23:a4:da:dc:c8:
                    2b:1e:da:6e:45:1e:89:98:da:f9:00:2e:06:e9:0c:
                    3b:70:d5:50:25:88:99:cb:cd:73:60:f7:d5:ff:35:
                    67:c5:a1:bc:5e:ab:cd:4a:b8:45:eb:c8:68:1e:0d:
                    0d:14:46:12:e3:d2:64:62:8a:42:98:bc:b4:c6:08:
                    08:f8:fd:a8:4c:64:9c:76:01:bd:2f:a9:6c:33:0f:
                    d8:3f:28:b8:3c:69:01:42:86:7e:69:c1:c9:06:ca:
                    e5:7a:46:65:e9:c2:d6:50:41:2e:3f:b7:e4:ed:6c:
                    d7:bf:26:01:11:a2:16:29:4a:6b:34:06:90:ec:13:
                    d2:b6:fb:6a:76:d2:3c:ed:f0:d6:2d:dd:e1:15:ec:
                    a3:9b:2f:2c:c9:3e:2b:e4:69:3b:ff:72:25:b1:36:
                    86:5b:c7:7f:6b:8b:55:1b:4a:c5:20:61:3d:ae:cb:
                    50:e1:08:3a:be:b0:8f:63:41:53:30:08:59:3c:98:
                    1d:77:ba:63:91:7a:ca:10:50:60:bf:f0:d7:bc:95:
                    87:8f:97:c5:fe:97:6a:01:94:a3:7c:5b:85:1d:2a:
                    39:3a:d0:54:a1:d1:39:71:9d:fd:21:f9:b5:7b:f0:
                    e2:e0:02:8f:6e:96:24:25:2c:a0:1e:2c:a8:c4:89:
                    a7:ef:ed:99:06:2f:b6:0a:4c:4f:db:a2:cc:37:1a:
                    af:47:85:2d:8a:5f:c4:34:34:4c:00:fd:18:93:67:
                    13:d1:37:e6:48:b4:8b:06:c5:57:7b:19:86:0a:79:
                    cb:00:c9:52:af:42:ff:37:8f:e1:a3:1e:7a:3d:50:
                    ab:63:06:e7:15:b5:3f:b6:45:37:94:37:b1:7e:f2:
                    48:c3:7f:c5:75:fe:97:8d:45:8f:1a:a7:1a:72:28:
                    1a:40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Authority Key Identifier: 
                keyid:17:9D:CD:1E:8B:D6:39:2B:70:D3:5C:D4:A0:B8:1F:B0:00:FC:C5:61

            X509v3 Subject Key Identifier: 
                17:9D:CD:1E:8B:D6:39:2B:70:D3:5C:D4:A0:B8:1F:B0:00:FC:C5:61
    Signature Algorithm: sha256WithRSAEncryption
         56:d5:7b:6e:e6:22:01:d2:42:9b:18:d5:0e:d7:66:23:5c:e3:
         fe:a0:c7:92:d2:e9:94:ad:4b:a2:c6:ec:12:7c:74:d5:48:d2:
         59:14:99:c0:eb:b9:d1:eb:f4:48:30:5b:ad:a7:57:73:99:a9:
         d3:e5:b7:d1:2e:59:24:58:dc:68:2e:2e:62:d8:6a:e4:70:0b:
         2d:20:50:20:a4:32:95:d1:00:98:bb:d3:fd:f7:32:f2:49:ae:
         c6:7a:e0:47:be:6e:ce:cb:a3:72:3a:2d:69:5d:cb:c8:e8:45:
         39:d4:fa:42:c1:11:4c:77:5d:92:fb:6a:ff:58:44:e5:eb:81:
         9e:af:a0:99:ad:be:a9:01:66:cb:38:1d:3c:df:43:1f:f4:4d:
         6e:b4:ba:17:46:fc:7d:fd:87:81:79:6a:0d:33:0f:fa:2f:f8:
         14:b9:80:b3:5d:4d:aa:97:e1:f9:e4:18:c5:f8:d5:38:8c:26:
         3c:fd:f2:28:e2:ee:5a:49:88:2c:df:79:3d:8e:9e:90:3c:bd:
         41:4a:3a:dd:5b:f6:9a:b4:ce:3f:25:30:7f:32:7d:a2:03:94:
         d0:dc:7a:a1:52:de:6e:93:8d:18:26:fd:55:ac:bd:8f:9b:d2:
         cf:af:e7:86:2c:cb:1f:09:6f:a3:6f:a9:84:d4:73:bf:4d:a1:
         74:1b:4e:23:60:f2:cc:0e:aa:7f:a4:9c:4c:25:a8:b2:66:3b:
         38:ff:d9:94:30:f6:72:84:be:68:55:10:0f:c6:73:2c:16:69:
         93:07:fe:b1:45:ed:bb:a2:55:6a:b0:da:b5:4a:02:25:27:85:
         d7:b7:b7:86:44:16:89:6c:80:2b:3e:97:a9:9c:d5:7e:55:4c:
         c6:de:45:10:1c:ea:e9:3b:9f:03:53:ee:ee:7a:01:02:16:78:
         d4:e8:c2:be:46:76:88:13:3f:22:bb:48:12:1d:52:00:b4:02:
         7e:21:1a:1e:9c:25:f4:f3:3d:5e:1e:d2:1c:f9:b3:2d:b6:f7:
         37:5c:c6:cb:21:4e:b0:f7:99:47:18:85:c1:2b:ba:55:ae:06:
         ea:d0:07:b2:dc:ab:d0:82:96:75:ce:d2:50:fe:99:e7:cf:2f:
         9f:e7:76:d1:61:2a:fb:21:bb:31:d0:aa:9f:47:a4:b2:22:ca:
         16:3a:50:57:c4:5b:43:67:c5:65:62:03:49:01:eb:43:d9:d8:
         f8:9e:ad:cf:b1:63:0e:45:f4:a0:5a:2c:9b:2d:c5:a6:c0:ad:
         a8:47:f4:27:4c:38:0d:2e:1b:49:3b:52:f4:e8:88:83:2b:54:
         28:d4:f2:35:52:b4:32:83:62:69:64:0c:91:9c:9f:97:ea:74:
         16:fd:1f:11:06:9a:9b:f4