ecert_ca_1-14_pem.crt: CN=Hongkong Post e-Cert CA 1 - 14,O=Hongkong Post,C=HK (Intermediate Certificate, Expiring 2023-05-15) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://www1.ecert.gov.hk/root/ecert_ca_1-14_pem.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www1.ecert.gov.hk/root/ecert_ca_1-14_pem.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275 (0x4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1
        Validity
            Not Before: Nov 30 02:48:32 2014 GMT
            Not After : May 15 04:52:29 2023 GMT
        Subject: C=HK, O=Hongkong Post, CN=Hongkong Post e-Cert CA 1 - 14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:4e:f4:22:f9:75:6d:b0:dd:0b:e1:71:12:
                    f4:04:79:f0:cf:1e:3b:23:b0:66:57:08:22:a1:b3:
                    7e:2d:8a:99:c3:35:d4:ea:c6:ba:6c:89:aa:c8:b1:
                    22:0c:be:d1:f1:15:02:3b:64:fc:59:46:82:21:72:
                    32:9d:67:ee:1b:8a:7f:14:84:44:2d:02:49:09:d0:
                    79:3c:ad:83:d5:bd:89:d8:ae:7d:a2:2a:17:c5:31:
                    ba:94:e8:1a:1c:6a:f9:e3:fb:03:ab:77:8b:e4:81:
                    6b:a2:20:66:66:41:d6:fc:26:10:90:ba:d6:1b:c2:
                    13:f9:40:18:0a:84:0d:dc:38:81:cc:5f:51:e9:bb:
                    15:60:ff:37:25:e8:2c:c8:f6:f3:08:f5:d1:7e:5f:
                    03:4b:ad:a2:71:c7:28:cc:b8:ea:1f:c2:7d:b5:28:
                    d0:3a:fc:b6:fa:6c:ba:0e:38:16:7e:3f:94:0b:e5:
                    6a:de:0f:29:25:bc:c0:e0:ce:ac:80:b6:b7:b5:2b:
                    ed:3d:48:89:92:b8:2b:1a:60:cf:df:e9:ad:2d:fb:
                    12:d6:1a:cc:0b:2b:7b:a8:7c:74:1f:45:92:a2:ad:
                    12:1d:cf:e4:b8:e4:03:2a:2b:8f:0e:44:5a:eb:b6:
                    bc:50:bc:48:08:a3:dd:b3:7c:f7:36:e2:f1:8a:b5:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                CA Issuers - URI:http://www1.hongkongpost.gov.hk/root/root_ca_1.crt

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: www.hongkongpost.gov.hk

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Authority Key Identifier: 
                DirName:/C=HK/O=Hongkong Post/CN=Hongkong Post Root CA 1
                serial:03:E8

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl1.hongkongpost.gov.hk/crl/RootCA1ARL.crl

            X509v3 Subject Key Identifier: 
                5B:37:7D:2D:B2:98:96:27:92:F7:1A:44:FC:37:A6:93:9E:5D:50:E4
    Signature Algorithm: sha256WithRSAEncryption
         a1:b5:62:23:c2:b1:22:6a:77:ba:62:45:d3:32:15:ee:34:2d:
         3d:1d:de:5f:d7:98:15:ec:86:6e:f1:47:6b:46:0f:73:61:a9:
         aa:b3:a8:db:b1:b0:1e:bc:2a:75:e3:d1:ab:50:61:1c:3f:e9:
         08:bf:65:41:22:82:40:28:82:7d:28:dc:5c:4b:f3:8f:16:c5:
         76:01:b1:98:3a:41:0d:a1:c4:b3:11:ca:00:6a:dc:75:73:15:
         fc:4f:10:44:71:a4:35:0a:2e:67:7f:4a:57:32:6d:7b:9e:72:
         6e:5a:ff:d0:d8:22:85:73:5d:a5:50:d1:03:44:20:69:de:8d:
         db:ea:2e:31:79:d4:8c:c3:9d:f4:12:38:da:2c:7a:71:6b:21:
         b7:93:96:26:13:49:c4:6b:ff:92:5e:a9:30:3b:f5:90:61:18:
         81:97:f3:f0:7c:16:0c:8e:b6:35:68:2e:ae:d5:bd:f2:1f:b8:
         6d:8a:52:1c:75:ae:ba:47:60:0e:95:e2:ee:c8:fe:eb:b1:02:
         24:54:95:7e:68:e6:97:f7:4b:2a:1f:a2:27:50:7a:aa:36:5d:
         e3:5d:20:56:11:25:77:12:41:a3:c5:93:a3:aa:1f:41:89:14:
         37:4c:aa:c5:47:5c:8c:3d:26:91:d8:fd:00:98:b7:be:1a:b8:
         f1:dd:de:d3

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIEhTCCA22gAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRzELMAkGA1UEBhMCSEsx
FjAUBgNVBAoTDUhvbmdrb25nIFBvc3QxIDAeBgNVBAMTF0hvbmdrb25nIFBvc3Qg
Um9vdCBDQSAxMB4XDTE0MTEzMDAyNDgzMloXDTIzMDUxNTA0NTIyOVowTjELMAkG
A1UEBhMCSEsxFjAUBgNVBAoTDUhvbmdrb25nIFBvc3QxJzAlBgNVBAMTHkhvbmdr
b25nIFBvc3QgZS1DZXJ0IENBIDEgLSAxNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMvDTvQi+XVtsN0L4XES9AR58M8eOyOwZlcIIqGzfi2KmcM11OrG
umyJqsixIgy+0fEVAjtk/FlGgiFyMp1n7huKfxSERC0CSQnQeTytg9W9idiufaIq
F8UxupToGhxq+eP7A6t3i+SBa6IgZmZB1vwmEJC61hvCE/lAGAqEDdw4gcxfUem7
FWD/NyXoLMj28wj10X5fA0utonHHKMy46h/CfbUo0Dr8tvpsug44Fn4/lAvlat4P
KSW8wODOrIC2t7Ur7T1IiZK4Kxpgz9/prS37EtYazAsre6h8dB9FkqKtEh3P5Ljk
Ayorjw5EWuu2vFC8SAij3bN89zbi8Yq1ARMCAwEAAaOCAXIwggFuMBIGA1UdEwEB
/wQIMAYBAf8CAQAwTgYIKwYBBQUHAQEEQjBAMD4GCCsGAQUFBzAChjJodHRwOi8v
d3d3MS5ob25na29uZ3Bvc3QuZ292LmhrL3Jvb3Qvcm9vdF9jYV8xLmNydDA4BgNV
HSAEMTAvMC0GBFUdIAAwJTAjBggrBgEFBQcCARYXd3d3Lmhvbmdrb25ncG9zdC5n
b3YuaGswDgYDVR0PAQH/BAQDAgHGMFoGA1UdIwRTMFGhS6RJMEcxCzAJBgNVBAYT
AkhLMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25na29uZyBQ
b3N0IFJvb3QgQ0EgMYICA+gwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybDEu
aG9uZ2tvbmdwb3N0Lmdvdi5oay9jcmwvUm9vdENBMUFSTC5jcmwwHQYDVR0OBBYE
FFs3fS2ymJYnkvcaRPw3ppOeXVDkMA0GCSqGSIb3DQEBCwUAA4IBAQChtWIjwrEi
ane6YkXTMhXuNC09Hd5f15gV7IZu8UdrRg9zYamqs6jbsbAevCp149GrUGEcP+kI
v2VBIoJAKIJ9KNxcS/OPFsV2AbGYOkENocSzEcoAatx1cxX8TxBEcaQ1Ci5nf0pX
Mm17nnJuWv/Q2CKFc12lUNEDRCBp3o3b6i4xedSMw530EjjaLHpxayG3k5YmE0nE
a/+SXqkwO/WQYRiBl/PwfBYMjrY1aC6u1b3yH7htilIcda66R2AOleLuyP7rsQIk
VJV+aOaX90sqH6InUHqqNl3jXSBWESV3EkGjxZOjqh9BiRQ3TKrFR1yMPSaR2P0A
mLe+Grjx3d7T
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06