gts2a1.der: CN=GTS CA 2A1,O=Google Trust Services LLC,C=US (Intermediate Certificate, Expiring 2025-09-30) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/gts2a1.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/gts2a1.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:00:8e:b2:58:e7:b5:94:0c:1f:f9:00:44
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS Root R4
        Validity
            Not Before: Aug 13 00:00:42 2020 GMT
            Not After : Sep 30 00:00:42 2025 GMT
        Subject: C=US, O=Google Trust Services LLC, CN=GTS CA 2A1
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:00:df:9b:b3:19:a3:c6:83:8f:64:10:37:30:88:
                    7f:09:d0:ff:27:7d:7f:e6:f4:61:dc:c7:65:7a:d5:
                    ce:d3:30:fe:4e:b7:03:e3:06:4f:32:b5:5d:32:c5:
                    f8:b6:23:ed:cb:32:3f:ad:81:22:69:a2:45:20:17:
                    c0:5e:a2:88:88
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                93:18:63:91:17:76:9A:5A:E6:3B:7F:2E:33:83:84:86:6B:1E:D4:F9
            X509v3 Authority Key Identifier: 
                keyid:80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C

            Authority Information Access: 
                OCSP - URI:http://ocsp.pki.goog/gtsr4
                CA Issuers - URI:http://pki.goog/repo/certs/gtsr4.der

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.pki.goog/gtsr4/gtsr4.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.11129.2.5.3.1
                  CPS: https://pki.goog/repository/

    Signature Algorithm: ecdsa-with-SHA384
         30:64:02:30:1b:0a:fa:32:a4:a2:3f:05:bb:50:d2:38:30:19:
         fd:cb:8f:7e:17:7b:b5:68:34:41:69:47:be:8f:70:d4:7b:03:
         75:c0:b4:ac:8d:ca:28:54:44:ff:41:0f:b3:bf:80:a9:02:30:
         57:50:a0:d3:58:25:fd:aa:74:00:99:a8:54:f4:66:c4:14:a4:
         00:8a:91:53:a7:d3:9e:2c:21:69:84:58:34:45:f2:69:76:66:
         dc:d9:1b:2f:ca:f9:81:f8:ad:c1:6d:72

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIDFjCCAp2gAwIBAgINAgCOsljntZQMH/kARDAKBggqhkjOPQQDAzBHMQswCQYD
VQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIG
A1UEAxMLR1RTIFJvb3QgUjQwHhcNMjAwODEzMDAwMDQyWhcNMjUwOTMwMDAwMDQy
WjBGMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2Vz
IExMQzETMBEGA1UEAxMKR1RTIENBIDJBMTBZMBMGByqGSM49AgEGCCqGSM49AwEH
A0IABADfm7MZo8aDj2QQNzCIfwnQ/yd9f+b0YdzHZXrVztMw/k63A+MGTzK1XTLF
+LYj7csyP62BImmiRSAXwF6iiIijggFtMIIBaTAOBgNVHQ8BAf8EBAMCAYYwEwYD
VR0lBAwwCgYIKwYBBQUHAwEwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU
kxhjkRd2mlrmO38uM4OEhmse1PkwHwYDVR0jBBgwFoAUgEzW63T/STaj1dj8tT7F
avCUHYwwaAYIKwYBBQUHAQEEXDBaMCYGCCsGAQUFBzABhhpodHRwOi8vb2NzcC5w
a2kuZ29vZy9ndHNyNDAwBggrBgEFBQcwAoYkaHR0cDovL3BraS5nb29nL3JlcG8v
Y2VydHMvZ3RzcjQuZGVyMDQGA1UdHwQtMCswKaAnoCWGI2h0dHA6Ly9jcmwucGtp
Lmdvb2cvZ3RzcjQvZ3RzcjQuY3JsME4GA1UdIARHMEUwCAYGZ4EMAQIBMDkGCysG
AQQB1nkCBQMBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vcGtpLmdvb2cvcmVwb3Np
dG9yeS8wCgYIKoZIzj0EAwMDZwAwZAIwGwr6MqSiPwW7UNI4MBn9y49+F3u1aDRB
aUe+j3DUewN1wLSsjcooVET/QQ+zv4CpAjBXUKDTWCX9qnQAmahU9GbEFKQAipFT
p9OeLCFphFg0RfJpdmbc2RsvyvmB+K3BbXI=
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06