GeoTrustTLSDVRSAMixedSHA2562021CA-1.crt: CN=GeoTrust TLS DV RSA Mixed SHA256 2021 CA-1,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2022-09-30) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562021CA-1.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562021CA-1.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:da:99:aa:86:2c:2a:be:70:2f:e4:ea:8b:f7:99:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Jan  1 23:59:59 2021 GMT
            Not After : Sep 30 23:59:59 2022 GMT
        Subject: C=US, O=DigiCert Inc, CN=GeoTrust TLS DV RSA Mixed SHA256 2021 CA-1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ba:82:dc:06:c2:2d:41:85:1b:a5:02:d0:11:
                    cf:9d:2e:8e:cb:7e:b3:69:cc:54:02:f7:17:30:a7:
                    e3:65:db:da:09:37:12:1d:d4:a1:b8:48:1d:b6:ca:
                    a8:57:c4:fa:ce:de:c8:d7:e2:04:94:a8:fa:da:6b:
                    8e:5e:b3:f3:7e:ac:df:1b:c2:2a:d5:64:c7:8b:3e:
                    fc:d7:b5:06:90:c1:1a:ba:c4:a9:30:86:cc:21:af:
                    67:90:3a:40:9b:94:95:68:16:85:9f:7e:b7:4c:30:
                    e2:58:28:8f:a1:b6:1c:d5:c8:b3:17:d9:06:e4:2f:
                    d8:1e:8a:d3:3d:23:06:6c:6d:ce:e8:06:47:01:8e:
                    50:ad:fe:eb:1c:e3:55:4d:a9:6c:23:ac:11:ed:9d:
                    b1:6d:5b:28:f3:12:14:34:74:f3:3c:12:a8:61:a0:
                    aa:51:8e:91:80:07:c0:86:78:a6:dd:71:67:cc:5f:
                    04:28:fe:84:45:dd:5c:4d:72:2d:7d:93:18:0f:76:
                    cd:c8:ce:f0:0a:5e:04:ce:72:d7:dc:02:1e:de:93:
                    f7:2d:68:61:38:8d:06:ea:72:5d:4d:81:2e:5c:4c:
                    f8:ea:44:99:71:11:0c:01:6c:f3:6a:14:71:25:c0:
                    ff:37:39:b7:bb:86:42:53:ab:36:44:24:ed:7d:43:
                    86:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FE:5D:95:05:ED:FB:BE:89:3C:2C:6B:81:3E:C8:BE:6A:F7:CC:F9:80
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua

    Signature Algorithm: sha256WithRSAEncryption
         c5:9c:1e:65:24:0f:f3:9d:e4:1e:2f:f8:25:64:dd:4a:56:29:
         9b:61:be:36:88:95:ab:d4:4e:19:92:ea:5b:2f:34:c8:ac:53:
         bd:32:7f:b1:aa:00:8d:fa:11:24:b7:40:a4:fb:92:f9:ae:a5:
         86:3f:18:31:b4:49:29:92:b8:84:81:d5:3d:06:90:83:95:da:
         56:0c:10:25:f1:43:cb:8f:40:b7:a3:5a:d4:75:3c:0b:db:52:
         b4:d5:77:53:14:1b:ed:a3:f1:cb:2c:15:9f:5e:11:73:24:ce:
         b5:92:d7:e8:d7:e4:7f:d1:e7:a9:00:42:a5:a7:66:4d:68:26:
         33:05:83:2a:67:22:76:d5:a6:d7:a7:54:45:c1:43:68:d9:63:
         de:c5:7e:90:32:d4:d4:23:4a:b8:14:f8:b8:72:2e:12:fe:b8:
         23:9a:f1:44:35:f1:3c:39:36:79:db:5f:97:7c:e5:07:44:05:
         5e:31:eb:75:1d:1b:5b:0f:ce:be:ab:93:6d:38:03:c7:39:3c:
         07:e8:db:33:e3:48:b2:25:41:58:b3:47:f8:61:0e:f8:13:16:
         90:3f:1b:e4:31:d6:57:97:38:5b:0b:67:26:64:35:f9:33:1e:
         f7:3c:e6:58:9d:46:d9:b4:1d:2d:6e:e7:5c:5b:14:f7:24:8b:
         8a:7e:26:aa

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06