siemens-g2.cer: C=DE,O=Siemens,CN=Siemens Issuing CA Internet Server 2020 (Intermediate Certificate, Expiring 2030-11-10) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://aia.entrust.net/siemens-g2.cer" --output cert.crt

Download certificate through wget:

wget -q "http://aia.entrust.net/siemens-g2.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fa:bb:27:dd:ff:80:d0:9a:00:00:00:00:51:d3:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
        Validity
            Not Before: Aug 10 14:11:48 2020 GMT
            Not After : Nov 10 14:41:48 2030 GMT
        Subject: CN=Siemens Issuing CA Internet Server 2020, O=Siemens, C=DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:6e:89:57:f0:77:c9:23:08:28:a5:30:b5:
                    8a:ba:ea:60:a9:e3:a6:38:97:d9:ae:2b:cc:21:f9:
                    44:8d:ed:19:6f:ca:23:a9:3e:7a:7a:ef:ce:d4:8c:
                    49:96:36:27:5c:15:07:07:72:30:5c:e1:41:90:34:
                    b1:fe:cb:56:cf:7a:15:6d:d4:c8:ca:f1:c8:65:14:
                    ce:6d:7c:ff:e4:27:e0:ef:77:80:58:da:95:e6:42:
                    2f:f5:de:f6:5c:29:f2:19:3b:11:9a:e6:80:f4:c9:
                    f9:20:1a:1c:0a:1b:15:b8:dd:65:f7:d6:77:51:1b:
                    6e:f3:28:07:6a:6f:91:1c:ed:84:23:51:91:88:a2:
                    ab:74:b5:05:4d:bb:ac:0d:95:06:1e:2c:e3:8f:55:
                    5b:6f:00:2b:b9:c1:5f:81:cd:39:2c:7a:4c:5f:c8:
                    45:88:80:9b:2a:21:bc:ef:c3:1a:f0:2c:04:93:e2:
                    5e:ba:ad:09:17:55:a0:06:1c:3f:7e:68:57:f1:49:
                    75:97:51:68:b0:ba:52:99:b6:56:8a:17:31:02:b6:
                    14:38:40:ee:e8:a5:c7:df:4e:27:c8:df:16:c7:78:
                    e6:cc:5e:2e:3b:7a:c9:20:bf:40:f0:8b:ea:ea:1b:
                    4a:7c:83:77:5f:e2:22:4d:96:6a:d7:14:f6:35:50:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.entrust.net/rpa

            Authority Information Access: 
                OCSP - URI:http://ocsp.entrust.net

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.entrust.net/g2ca.crl

            X509v3 Subject Key Identifier: 
                C9:A7:57:CB:86:C9:61:07:C6:C2:B4:86:65:A9:1E:C1:CA:E1:02:9B
            X509v3 Authority Key Identifier: 
                keyid:6A:72:26:7A:D0:1E:EF:7D:E7:3B:69:51:D4:6C:8D:9F:90:12:66:AB

    Signature Algorithm: sha256WithRSAEncryption
         65:fc:b5:bf:27:f1:13:a7:07:07:08:b9:a9:39:35:19:30:da:
         ac:67:c5:11:85:69:4c:77:9e:42:3a:40:cd:87:63:0c:3c:22:
         36:4e:d3:b6:1d:8d:c2:50:14:aa:d6:88:d7:8d:ca:a2:8f:f5:
         c6:19:6c:da:c7:14:e9:9f:51:0f:f0:cb:ab:85:57:0a:4c:60:
         28:ea:99:62:7a:3d:f2:b3:12:db:1a:88:74:b4:de:8a:89:d7:
         48:bc:56:78:8e:b8:1f:0a:93:16:5b:f0:0c:1f:81:04:24:0e:
         cb:93:ba:83:e5:ca:29:af:94:e9:7c:b9:34:01:05:a7:26:2b:
         c5:d1:8b:1c:64:38:a1:64:96:db:73:68:a6:10:6a:b3:bc:3b:
         fb:bd:4e:b0:ac:cb:f7:b6:b7:05:19:71:05:60:ea:da:2e:02:
         76:de:b7:8e:c4:3e:d4:d3:82:dd:24:a2:fd:97:11:c6:49:db:
         87:e2:2c:f6:7f:8e:d7:ce:07:01:f2:3b:1d:57:98:85:a9:4a:
         f9:96:85:2b:11:1a:56:bc:49:05:23:cf:0c:c6:c9:89:39:fa:
         83:7d:65:1b:d7:5a:e2:1d:76:81:e8:97:68:a1:af:40:46:d6:
         d4:fb:d7:8d:b0:2f:2c:50:04:1b:17:e9:e1:28:27:7a:7e:1c:
         fb:31:f3:db

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06