ecert_ssl_ca_3-17_pem.crt: CN=Hongkong Post e-Cert SSL CA 3 - 17,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Intermediate Certificate, Expiring 2032-06-03) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://www1.ecert.gov.hk/root/ecert_ssl_ca_3-17_pem.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www1.ecert.gov.hk/root/ecert_ssl_ca_3-17_pem.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fe:03:bd:8b:bb:95:12:a4:09:1e:d9:3c:5f:ed:14:c0:e1:81:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 3
        Validity
            Not Before: Jun  3 04:07:50 2017 GMT
            Not After : Jun  3 04:07:50 2032 GMT
        Subject: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post e-Cert SSL CA 3 - 17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a0:25:a1:f4:37:af:87:37:ef:63:95:61:92:
                    93:c7:1a:8c:09:a4:72:66:b8:d1:ff:7b:b1:ac:e7:
                    11:fa:c7:d4:7d:5b:a0:6e:85:58:34:91:67:81:9c:
                    d0:06:cf:55:2d:cf:58:45:b5:9c:c5:fd:0e:e8:c5:
                    e5:f9:e1:45:84:19:7a:ec:2f:88:91:9b:22:51:21:
                    4d:8b:af:17:b3:7f:4d:73:d0:37:54:8f:f9:ba:b5:
                    78:92:24:9f:49:1d:86:d6:96:38:86:a3:ab:9b:c6:
                    10:7b:d0:e8:21:59:10:4f:f2:11:69:6b:2a:71:f4:
                    14:d5:e9:47:1d:98:8f:b6:cd:f9:42:8e:4f:3e:57:
                    90:00:6e:49:5d:10:62:a9:ba:50:3b:79:91:10:c5:
                    13:db:7f:0a:1b:21:4c:00:71:1a:c1:0c:da:fa:5e:
                    f4:bb:ca:7a:6b:2e:38:1b:70:d2:57:9e:d0:8e:8c:
                    3a:c9:74:fe:44:8d:e2:4a:68:2e:33:de:aa:a1:87:
                    6a:2d:e7:51:70:80:fa:a5:a9:fa:6f:b3:c1:d4:76:
                    39:84:f1:97:f4:c3:05:9a:7c:c0:32:ca:84:94:e4:
                    fc:01:5a:ca:35:30:97:52:3e:a9:39:d4:d1:68:e9:
                    a5:5e:6f:c2:17:39:bc:50:5d:64:63:3e:46:da:c5:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                CA Issuers - URI:http://www1.hongkongpost.gov.hk/root/root_ca_3.crt
                OCSP - URI:http://ocsp1.hongkongpost.gov.hk

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: www.hongkongpost.gov.hk

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Authority Key Identifier: 
                keyid:17:9D:CD:1E:8B:D6:39:2B:70:D3:5C:D4:A0:B8:1F:B0:00:FC:C5:61

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl1.hongkongpost.gov.hk/crl/RootCA3ARL.crl

            X509v3 Subject Key Identifier: 
                92:37:B0:70:9C:8E:79:DB:B3:19:13:B8:9B:A5:32:C0:B7:D6:27:62
    Signature Algorithm: sha256WithRSAEncryption
         85:d2:16:01:34:e1:9e:80:70:c1:45:51:63:f3:7b:86:6e:05:
         ab:f8:c6:bf:2d:6c:01:03:0d:26:da:3d:18:a7:43:61:d9:16:
         9c:34:68:88:40:1b:88:78:59:a0:c3:d1:d0:eb:36:cf:f0:f1:
         7a:d6:41:8f:98:9e:04:f0:eb:3f:dc:b5:af:81:c9:5b:b8:90:
         61:4a:19:16:0b:97:db:56:5f:c6:b5:a1:68:44:4c:77:10:e6:
         e0:14:7f:ea:d3:f7:88:2f:e0:35:a7:48:a0:c3:36:b4:f4:01:
         a1:a3:6e:8f:ff:20:5d:14:75:02:01:6c:2b:19:8f:43:50:0a:
         03:28:b8:e8:18:0b:ac:c2:52:fe:09:3b:8b:60:c0:1c:00:54:
         45:db:15:4c:97:1f:ea:d7:b4:4d:59:29:2b:35:d9:73:a7:21:
         e0:3c:4c:2b:cf:86:de:45:26:6f:11:3c:93:52:bb:74:07:60:
         c7:6f:95:ef:19:27:bf:d2:6b:4b:99:32:fa:5d:30:74:f8:39:
         f4:04:3b:45:21:3f:73:12:7e:56:14:31:f5:21:bb:a3:08:42:
         a8:d2:8f:08:c7:ab:d2:f2:26:f8:34:7a:1b:a7:15:1a:2d:fd:
         df:7c:2e:d0:29:c9:17:9c:77:eb:23:35:c2:c3:7f:a1:06:ab:
         27:44:44:01:ae:6f:98:3a:dc:c7:06:f4:b8:73:ff:ce:5d:48:
         64:cd:20:e8:eb:0f:ca:90:c8:bc:5c:86:67:6f:ab:61:50:72:
         ca:26:4d:59:4c:5e:d9:4c:f0:d5:cb:0e:63:e7:42:3c:ae:7b:
         ca:bd:43:e4:0e:f0:14:c3:31:29:26:15:88:b9:b2:ce:d9:cd:
         1f:1d:de:6e:08:37:1d:3c:83:d4:c1:63:72:7b:89:84:d7:a6:
         99:29:ba:d6:ee:fb:a4:85:6d:1d:ba:bf:7b:8f:cf:cf:6e:d8:
         bf:5b:9e:72:c1:66:09:5c:26:50:ce:ee:3a:5c:1a:f0:b2:d3:
         b2:f9:75:01:34:d7:9c:6c:5a:af:2d:c6:00:b6:12:c7:fc:d8:
         73:ed:c2:5b:9d:64:ac:84:3e:99:2a:4b:0b:4e:86:95:32:ff:
         8a:67:5b:d3:5e:ce:3f:81:3c:ba:e0:76:49:a4:ba:0c:10:b5:
         fb:15:fe:3e:8b:3c:d7:58:e3:7f:f5:d2:4c:f4:39:05:43:b9:
         f2:1a:be:5a:0d:75:a8:af:fb:c0:13:5c:4a:b5:2d:7c:d2:b8:
         eb:a7:e1:23:d8:98:b3:4b:a9:2e:7d:d0:81:b1:8d:1b:89:7b:
         80:e5:47:17:88:26:91:00:1c:08:af:fd:32:d4:fc:4f:3f:49:
         4f:c0:59:cc:07:d1:91:33

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06