ecert_ca_2-15_pem.crt: CN=Hongkong Post e-Cert CA 2 - 15,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Intermediate Certificate, Expiring 2030-09-05) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://www1.ecert.gov.hk/root/ecert_ca_2-15_pem.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www1.ecert.gov.hk/root/ecert_ca_2-15_pem.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a8:9f:e8:f0:ea:e0:a5:51:ff:e6:5f:c0:85:34:0e:a0:d3:4a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 2
        Validity
            Not Before: Sep  5 08:07:53 2015 GMT
            Not After : Sep  5 08:07:53 2030 GMT
        Subject: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post e-Cert CA 2 - 15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:db:de:85:46:c1:36:f5:ca:e4:f3:17:eb:
                    f9:f2:17:54:bb:94:67:7a:7f:5a:12:2e:ee:85:b0:
                    bc:ce:d7:9e:8c:2d:7e:1c:c7:22:a9:e5:be:7a:e0:
                    fc:b2:67:5f:df:8b:ad:cc:41:be:7a:00:f1:a7:99:
                    af:f7:22:6d:c3:cd:c1:0d:58:52:ea:02:46:8a:4f:
                    08:38:77:97:6f:e8:0d:2a:06:3a:62:1c:fc:c4:b4:
                    bc:bd:ac:33:a9:c3:4c:98:64:f9:0d:70:6f:c1:08:
                    e9:66:53:7b:44:22:9f:42:e2:b1:87:8e:9a:2a:fc:
                    5c:f8:63:44:d4:78:fa:7a:00:d2:ef:66:77:f6:85:
                    cf:2e:3b:f1:19:a3:99:2d:5b:25:c8:b9:13:b1:55:
                    37:a5:ce:d1:c7:d7:f7:3b:98:ff:af:48:52:00:6c:
                    76:67:6d:1b:54:ad:66:4f:fb:b9:60:f2:84:fa:45:
                    38:ff:dd:51:95:b0:89:5c:f5:56:88:ab:50:b2:2c:
                    d1:21:56:a8:18:cf:53:bc:05:0f:8b:6d:33:c1:c1:
                    67:f9:e7:ec:79:c0:9f:8c:2b:c4:de:56:98:1f:af:
                    6e:af:8a:f4:91:93:ed:92:41:9e:3a:37:68:be:5b:
                    c3:07:1a:bf:77:65:b8:73:8f:23:60:8b:08:54:47:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                CA Issuers - URI:http://www1.hongkongpost.gov.hk/root/root_ca_2.crt

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: www.hongkongpost.gov.hk

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Authority Key Identifier: 
                keyid:61:B5:E0:42:DE:B6:AF:A7:20:EA:F6:24:C8:A7:9D:85:A0:58:53:D8

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl1.hongkongpost.gov.hk/crl/RootCA2ARL.crl

            X509v3 Subject Key Identifier: 
                D9:4C:23:03:32:F2:5F:59:DC:27:59:BE:CB:01:2D:97:C6:0B:AA:20
    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:c2:6c:6f:2d:de:c1:a3:34:6f:e6:5a:32:98:e0:ca:64:
         20:17:c0:9f:4c:63:32:84:6b:cb:89:ae:3f:d5:17:d1:83:67:
         f7:7e:8d:8d:fa:6e:8a:fc:2e:d7:ec:a2:80:ea:39:a9:94:9f:
         41:eb:02:59:93:b0:26:58:fa:05:c3:27:98:42:5e:cd:40:fd:
         51:db:5d:aa:8f:b2:72:f4:b6:66:ac:d3:da:3f:4e:92:5b:97:
         81:a6:2a:cf:c6:05:15:b5:ee:7b:79:c8:5b:98:35:5f:fd:6e:
         2d:d1:e1:7f:78:18:7d:2a:0c:5d:4d:d3:7f:f7:9a:45:d6:4f:
         99:bb:5e:1b:ad:54:95:d6:e3:ab:99:dc:87:69:b7:91:98:0a:
         7b:12:98:f6:2a:77:d9:58:b3:eb:cf:48:1a:36:98:57:b6:a1:
         f1:d1:28:34:91:e3:09:cc:c7:10:c1:59:09:53:e6:67:e9:48:
         a3:cd:36:bf:db:94:c5:ef:04:2a:35:49:03:54:fe:cf:a6:92:
         33:c5:2f:6a:ef:ba:d3:73:27:26:0b:8e:c9:ae:28:11:03:96:
         8b:e5:52:c7:b3:22:9c:7d:cc:ea:53:21:9b:2f:c6:50:0c:62:
         09:28:34:55:db:b7:3f:2b:55:7d:38:e5:48:ba:10:b0:17:7f:
         51:5b:10:63:1c:aa:1b:16:ac:f2:80:7b:f8:b1:b3:ee:7a:64:
         0b:31:75:64:4b:7c:75:85:a6:5b:ce:a4:6d:d3:98:31:43:17:
         96:24:a1:b2:f4:d2:1b:89:b0:c8:e1:21:f6:dd:e1:34:46:31:
         2b:b7:26:bf:fa:9c:7f:7d:e2:72:e0:ef:91:3b:27:e5:f7:8f:
         06:6e:9b:a2:b2:c2:a3:52:17:44:c9:3c:cb:f8:8b:71:33:cd:
         06:a8:2e:3c:03:ad:bf:66:bb:ab:26:be:a3:9a:bc:01:14:1a:
         8c:6f:a2:c2:b0:cc:27:a2:1e:ca:36:1a:e3:44:5a:a8:43:09:
         ea:4e:2e:b7:1d:2a:ce:5b:69:f4:2a:6f:24:40:c4:a0:47:6e:
         64:75:0a:f4:5d:75:de:4b:19:b3:3e:77:9e:08:22:94:2d:2e:
         10:52:2f:25:da:43:ed:d9:ed:ec:c8:6b:15:44:b2:56:0f:ec:
         44:3f:b3:5c:69:62:89:52:3d:3f:db:06:8d:e0:df:63:8a:ea:
         4d:83:cc:94:b3:8d:37:21:ba:1e:4b:a2:ac:a8:c2:64:45:fd:
         75:b7:56:7f:dd:dc:91:ef:34:dd:4d:5a:83:33:0d:f9:1c:45:
         ab:ce:84:18:4c:37:5e:e1:57:bb:44:64:70:35:ee:91:ab:90:
         14:c6:ff:38:2d:fa:ac:6f

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIFrDCCA5SgAwIBAgIUAKif6PDq4KVR/+ZfwIU0DqDTSggwDQYJKoZIhvcNAQEL
BQAwbzELMAkGA1UEBhMCSEsxEjAQBgNVBAgTCUhvbmcgS29uZzESMBAGA1UEBxMJ
SG9uZyBLb25nMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25n
a29uZyBQb3N0IFJvb3QgQ0EgMjAeFw0xNTA5MDUwODA3NTNaFw0zMDA5MDUwODA3
NTNaMHYxCzAJBgNVBAYTAkhLMRIwEAYDVQQIEwlIb25nIEtvbmcxEjAQBgNVBAcT
CUhvbmcgS29uZzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEnMCUGA1UEAxMeSG9u
Z2tvbmcgUG9zdCBlLUNlcnQgQ0EgMiAtIDE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0PLb3oVGwTb1yuTzF+v58hdUu5Rnen9aEi7uhbC8zteejC1+
HMciqeW+euD8smdf34utzEG+egDxp5mv9yJtw83BDVhS6gJGik8IOHeXb+gNKgY6
Yhz8xLS8vawzqcNMmGT5DXBvwQjpZlN7RCKfQuKxh46aKvxc+GNE1Hj6egDS72Z3
9oXPLjvxGaOZLVslyLkTsVU3pc7Rx9f3O5j/r0hSAGx2Z20bVK1mT/u5YPKE+kU4
/91RlbCJXPVWiKtQsizRIVaoGM9TvAUPi20zwcFn+efsecCfjCvE3laYH69ur4r0
kZPtkkGeOjdovlvDBxq/d2W4c48jYIsIVEcd6QIDAQABo4IBNzCCATMwEgYDVR0T
AQH/BAgwBgEB/wIBADBOBggrBgEFBQcBAQRCMEAwPgYIKwYBBQUHMAKGMmh0dHA6
Ly93d3cxLmhvbmdrb25ncG9zdC5nb3YuaGsvcm9vdC9yb290X2NhXzIuY3J0MDgG
A1UdIAQxMC8wLQYEVR0gADAlMCMGCCsGAQUFBwIBFhd3d3cuaG9uZ2tvbmdwb3N0
Lmdvdi5oazAOBgNVHQ8BAf8EBAMCAcYwHwYDVR0jBBgwFoAUYbXgQt62r6cg6vYk
yKedhaBYU9gwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybDEuaG9uZ2tvbmdw
b3N0Lmdvdi5oay9jcmwvUm9vdENBMkFSTC5jcmwwHQYDVR0OBBYEFNlMIwMy8l9Z
3CdZvssBLZfGC6ogMA0GCSqGSIb3DQEBCwUAA4ICAQBs/8Jsby3ewaM0b+ZaMpjg
ymQgF8CfTGMyhGvLia4/1RfRg2f3fo2N+m6K/C7X7KKA6jmplJ9B6wJZk7AmWPoF
wyeYQl7NQP1R212qj7Jy9LZmrNPaP06SW5eBpirPxgUVte57echbmDVf/W4t0eF/
eBh9KgxdTdN/95pF1k+Zu14brVSV1uOrmdyHabeRmAp7Epj2KnfZWLPrz0gaNphX
tqHx0Sg0keMJzMcQwVkJU+Zn6UijzTa/25TF7wQqNUkDVP7PppIzxS9q77rTcycm
C47JrigRA5aL5VLHsyKcfczqUyGbL8ZQDGIJKDRV27c/K1V9OOVIuhCwF39RWxBj
HKobFqzygHv4sbPuemQLMXVkS3x1haZbzqRt05gxQxeWJKGy9NIbibDI4SH23eE0
RjErtya/+px/feJy4O+ROyfl948GbpuissKjUhdEyTzL+ItxM80GqC48A62/Zrur
Jr6jmrwBFBqMb6LCsMwnoh7KNhrjRFqoQwnqTi63HSrOW2n0Km8kQMSgR25kdQr0
XXXeSxmzPneeCCKULS4QUi8l2kPt2e3syGsVRLJWD+xEP7NcaWKJUj0/2waN4N9j
iupNg8yUs403IboeS6KsqMJkRf11t1Z/3dyR7zTdTVqDMw35HEWrzoQYTDde4Ve7
RGRwNe6Rq5AUxv84Lfqsbw==
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06