SectigoSHA256EVSecureServerCA2.crt: CN=Sectigo SHA-256 EV Secure Server CA 2,O=Sectigo Limited,C=GB (Intermediate Certificate, Expiring 2030-12-31) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://crt.sectigo.com/SectigoSHA256EVSecureServerCA2.crt" --output cert.crt

Download certificate through wget:

wget -q "http://crt.sectigo.com/SectigoSHA256EVSecureServerCA2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d2:b7:5a:b8:a0:bd:7a:12:65:ba:b5:b0:b6:52:83:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority
        Validity
            Not Before: Apr  1 00:00:00 2020 GMT
            Not After : Dec 31 23:59:59 2030 GMT
        Subject: C=GB, O=Sectigo Limited, CN=Sectigo SHA-256 EV Secure Server CA 2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:93:a2:f6:60:ce:2c:8e:53:4b:18:32:da:28:
                    44:3d:e2:97:9b:d4:2d:4f:d1:fd:0d:1a:e2:2d:e5:
                    e9:ef:35:6d:dd:f0:d9:80:e9:d5:e6:a9:49:9d:2f:
                    0d:14:46:73:e9:24:25:b6:bf:31:b6:4b:6b:36:c5:
                    40:69:b0:75:1e:34:75:f8:29:14:2b:1b:d8:6b:2b:
                    61:73:f4:61:65:06:b9:2b:e8:76:49:c7:97:fa:d7:
                    6a:b3:c1:6e:1c:bb:9b:57:bf:aa:71:fd:99:65:3c:
                    eb:f1:68:ac:06:20:75:46:5f:85:55:18:90:9b:a5:
                    91:3f:28:8a:8d:b3:45:fe:a8:15:90:33:ce:d1:d1:
                    32:42:bc:f4:d9:bd:cc:22:b4:d6:1d:e6:54:15:cb:
                    c8:d0:2e:8f:70:6f:07:f9:8f:85:77:e9:1a:59:17:
                    ef:d9:38:93:a9:9b:cf:b2:07:2a:ed:e3:fc:69:d7:
                    a6:fd:5c:0b:19:96:86:63:b9:0b:65:47:57:9c:93:
                    94:ee:9f:e3:6e:84:cf:82:1e:51:e8:14:5c:5b:e1:
                    3f:cf:ea:02:1a:2a:65:e9:cb:7b:76:45:5b:71:7a:
                    d6:c2:5e:20:df:8d:b4:52:24:ed:1b:17:82:85:5a:
                    8c:3b:20:74:74:0f:92:e6:e0:7f:b3:28:b0:52:f7:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:0B:58:E5:8B:C6:4C:15:37:A4:40:A9:30:A9:21:BE:47:36:5A:56:FF

            X509v3 Subject Key Identifier: 
                E2:E5:55:07:BC:C1:BC:AF:10:F6:E9:E4:C9:DB:02:7A:1C:17:86:39
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://sectigo.com/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODOCertificationAuthority.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha256WithRSAEncryption
         33:f6:ec:a1:61:cb:9e:9a:38:e8:92:14:fc:dd:30:31:cc:eb:
         50:9a:40:1f:57:e6:ff:fc:4d:cd:9e:7f:c0:b5:2e:fc:89:48:
         e4:ce:e5:d1:ae:92:83:6a:c5:46:21:f2:3b:0f:9d:40:77:67:
         2c:8c:59:9f:d4:3d:07:a0:b1:2e:57:21:14:68:1e:bb:41:19:
         8e:68:e8:e3:0a:91:4c:61:1e:07:ec:7a:52:8b:bf:f7:82:34:
         45:f8:a4:02:b7:d2:7f:97:ad:42:e8:89:6d:9a:61:ac:e1:a1:
         44:b5:01:ac:1e:ed:9f:5e:cb:37:cb:16:46:0d:ef:7c:09:65:
         6c:16:a2:22:32:5b:d7:26:da:74:45:57:26:4b:d5:57:2b:fe:
         c1:ec:08:40:89:29:86:85:fd:6c:9f:dc:6d:cf:47:18:94:54:
         cb:ec:27:97:6f:88:f9:5e:06:c6:76:e2:bf:3e:5b:05:86:e7:
         f7:54:dd:75:05:04:a7:da:1b:80:f0:62:a3:61:82:4d:a1:29:
         b3:3d:03:53:2b:3e:9d:38:58:d4:a7:c3:23:5d:43:62:d4:1a:
         24:6a:f1:f3:f6:63:6e:7d:21:7a:e1:ad:4b:dc:18:53:9e:14:
         0d:74:05:5f:ce:6c:b5:73:bc:10:f6:35:25:ec:47:be:12:07:
         14:0c:06:b3

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06