gts2p2.der: CN=GTS CA 2P2,O=Google Trust Services LLC,C=US (Intermediate Certificate, Expiring 2027-09-30) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://pki.goog/repo/certs/gts2p2.der (in DER format )
Serial Number : 165390902415987118112848868672
SHA-1 Fingerprint : 6cba4f1368c046aa0ff4b6ed7e67d54a305be9d7
SHA-1 Fingerprint : 6c:ba:4f:13:68:c0:46:aa:0f:f4:b6:ed:7e:67:d5:4a:30:5b:e9:d7
SHA-256 Fingerprint : 3647aac2b282bc941fe7a642e3dcb99cfc5b3c6dce944a1e96f8028e89b7b090
SHA-256 Fingerprint : 36:47:aa:c2:b2:82:bc:94:1f:e7:a6:42:e3:dc:b9:9c:fc:5b:3c:6d:ce:94:4a:1e:96:f8:02:8e:89:b7:b0:90
Signature Hash Algorithm : sha384
Subject : CN=GTS CA 2P2,O=Google Trust Services LLC,C=US
- Country Name: US (United States of America)
- Organization: Google Trust Services LLC
- Common Name: GTS CA 2P2
Not Valid Before: 2022-10-05 00:00:42
Not Valid After: 2027-09-30 00:00:42
Issuer (Parent Certificate):
- Issuer Name: CN=GTS Root R4,O=Google Trust Services LLC,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=GTS Root R4,O=Google Trust Services LLC,C=US .

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/gts2p2.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/gts2p2.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:16:68:25:e1:70:04:40:61:24:91:f5:40
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS Root R4
        Validity
            Not Before: Oct  5 00:00:42 2022 GMT
            Not After : Sep 30 00:00:42 2027 GMT
        Subject: C=US, O=Google Trust Services LLC, CN=GTS CA 2P2
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:a7:50:93:38:c0:1e:a3:94:b1:bf:d3:90:7e:dc:
                    cf:99:51:b4:3d:fb:e2:d3:59:f2:b6:2b:09:46:f5:
                    9b:1c:a9:13:e5:66:09:bd:49:83:3a:be:f7:7b:51:
                    74:4e:fc:19:1c:cf:23:8f:aa:ea:b6:a1:6b:54:c4:
                    c9:68:28:9e:23
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                87:23:A9:50:48:0E:07:89:54:0A:71:30:F6:33:D2:0A:47:F6:9D:AC
            X509v3 Authority Key Identifier: 
                keyid:80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C

            Authority Information Access: 
                OCSP - URI:http://ocsp.pki.goog/gtsr4
                CA Issuers - URI:http://pki.goog/repo/certs/gtsr4.der

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.pki.goog/gtsr4/gtsr4.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.11129.2.5.3
                  CPS: https://pki.goog/repository/

    Signature Algorithm: ecdsa-with-SHA384
         30:66:02:31:00:c9:db:22:24:1b:e5:fb:1d:7b:15:2e:54:6a:
         01:31:5c:2c:0c:f1:9d:ed:50:b5:dd:8d:0e:05:ec:ed:ec:5a:
         85:1c:3c:2a:9b:c9:e7:55:d5:7f:16:43:72:5c:db:fd:fc:02:
         31:00:de:75:34:6a:8c:71:b7:b1:30:e6:0a:a4:b0:b4:cd:77:
         e3:37:0b:ea:06:c6:61:9b:30:82:40:83:3a:31:5c:81:20:3d:
         2b:8e:3c:4f:bb:b9:5a:21:a1:ea:02:ee:93:e5

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates