gtsr2.der: CN=GTS Root R2,O=Google Trust Services LLC,C=US (Root Certificate, Expiring 2036-06-22) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Certificate Download URL: https://pki.goog/repo/certs/gtsr2.der (in DER format )
Serial Number : 159662449406622349769042896298
SHA-1 Fingerprint : 9a44497632dbdefad0bcfb5a7b17bd9e56092494
SHA-1 Fingerprint : 9a:44:49:76:32:db:de:fa:d0:bc:fb:5a:7b:17:bd:9e:56:09:24:94
SHA-256 Fingerprint : 8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8
SHA-256 Fingerprint : 8d:25:cd:97:22:9d:bf:70:35:6b:da:4e:b3:cc:73:40:31:e2:4c:f0:0f:af:cf:d3:2d:c7:6e:b5:84:1c:7e:a8
Signature Hash Algorithm : sha384
Subject : CN=GTS Root R2,O=Google Trust Services LLC,C=US
- Country Name: US (United States of America)
- Organization: Google Trust Services LLC
- Common Name: GTS Root R2
Not Valid Before: 2016-06-22 00:00:00
Not Valid After: 2036-06-22 00:00:00
Issuer (Parent Certificate):
- Issuer Name: CN=GTS Root R2,O=Google Trust Services LLC,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Root Certificate
- Certificate Policy (CP) URL: https://pki.goog/repo/cp/3.4/GTS-CP.pdf
- Certificate Practice Statement (CPS) URL: https://pki.goog/repo/cps/4.13/GTS-CPS.pdf
- Auditor: Ernst & Young, LLP
- Standard Audit URL: https://www.cpacanada.ca//GenericHandlers/CPACHandler.ashx?AttachmentID=4525b841-06ec-4ec8-9cae-ad27ee4e19a9
- Standard Audit Period Start Date: 2021.10.01
- Standard Audit Period End Date: 2022.09.30
- Standard Audit Statement Date: 2022.10.31
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://crl.pki.goog/gtsr2/gtsr2.crl

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/gtsr2.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/gtsr2.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:03:e5:ae:c5:8d:04:25:1a:ab:11:25:aa
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS Root R2
        Validity
            Not Before: Jun 22 00:00:00 2016 GMT
            Not After : Jun 22 00:00:00 2036 GMT
        Subject: C=US, O=Google Trust Services LLC, CN=GTS Root R2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:ce:de:fd:a6:fb:ec:ec:14:34:3c:07:06:5a:6c:
                    59:f7:19:35:dd:f7:c1:9d:55:aa:d3:cd:3b:a4:93:
                    72:ef:0a:fa:6d:9d:f6:f0:85:80:5b:a1:48:52:9f:
                    39:c5:b7:ee:28:ac:ef:cb:76:68:14:b9:df:ad:01:
                    6c:99:1f:c4:22:1d:9f:fe:72:77:e0:2c:5b:af:e4:
                    04:bf:4f:72:a0:1a:34:98:e8:39:68:ec:95:25:7b:
                    76:a1:e6:69:b9:85:19:bd:89:8c:fe:ad:ed:36:ea:
                    73:bc:ff:83:e2:cb:7d:c1:d2:ce:4a:b3:8d:05:9e:
                    8b:49:93:df:c1:5b:d0:6e:5e:f0:2e:30:2e:82:fc:
                    fa:bc:b4:17:0a:48:e5:88:9b:c5:9b:6b:de:b0:ca:
                    b4:03:f0:da:f4:90:b8:65:64:f7:5c:4c:ad:e8:7e:
                    66:5e:99:d7:b8:c2:3e:c8:d0:13:9d:ad:ee:e4:45:
                    7b:89:55:f7:8a:1f:62:52:84:12:b3:c2:40:97:e3:
                    8a:1f:47:91:a6:74:5a:d2:f8:b1:63:28:10:b8:b3:
                    09:b8:56:77:40:a2:26:98:79:c6:fe:df:25:ee:3e:
                    e5:a0:7f:d4:61:0f:51:4b:3c:3f:8c:da:e1:70:74:
                    d8:c2:68:a1:f9:c1:0c:e9:a1:e2:7f:bb:55:3c:76:
                    06:ee:6a:4e:cc:92:88:30:4d:9a:bd:4f:0b:48:9a:
                    84:b5:98:a3:d5:fb:73:c1:57:61:dd:28:56:75:13:
                    ae:87:8e:e7:0c:51:09:10:75:88:4c:bc:8d:f9:7b:
                    3c:d4:22:48:1f:2a:dc:eb:6b:bb:44:b1:cb:33:71:
                    32:46:af:ad:4a:f1:8c:e8:74:3a:ac:e7:1a:22:73:
                    80:d2:30:f7:25:42:c7:22:3b:3b:12:ad:96:2e:c6:
                    c3:76:07:aa:20:b7:35:49:57:e9:92:49:e8:76:16:
                    72:31:67:2b:96:7e:8a:a3:c7:94:56:22:bf:6a:4b:
                    7e:01:21:b2:23:32:df:e4:9a:44:6d:59:5b:5d:f5:
                    00:a0:1c:9b:c6:78:97:8d:90:ff:9b:c8:aa:b4:af:
                    11:51:39:5e:d9:fb:67:ad:d5:5b:11:9d:32:9a:1b:
                    bd:d5:ba:5b:a5:c9:cb:25:69:53:55:27:5c:e0:ca:
                    36:cb:88:61:fb:1e:b7:d0:cb:ee:16:fb:d3:a6:4c:
                    de:92:a5:d4:e2:df:f5:06:54:de:2e:9d:4b:b4:93:
                    30:aa:81:ce:dd:1a:dc:51:73:0d:4f:70:e9:e5:b6:
                    16:21:19:79:b2:e6:89:0b:75:64:ca:d5:ab:bc:09:
                    c1:18:a1:ff:d4:54:a1:85:3c:fd:14:24:03:b2:87:
                    d3:a4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                BB:FF:CA:8E:23:9F:4F:99:CA:DB:E2:68:A6:A5:15:27:17:1E:D9:0E
    Signature Algorithm: sha384WithRSAEncryption
         1f:ca:ce:dd:c7:be:a1:9f:d9:27:4c:0b:dc:17:98:11:6a:88:
         de:3d:e6:71:56:72:b2:9e:1a:4e:9c:d5:2b:98:24:5d:9b:6b:
         7b:b0:33:82:09:bd:df:25:46:ea:98:9e:b6:1b:fe:83:3c:d2:
         62:61:c1:04:ed:ce:e0:c5:c9:c8:13:13:55:e7:a8:63:ad:8c:
         7b:01:fe:77:30:e1:ce:68:9b:05:f8:12:ee:79:31:a0:41:45:
         35:28:0a:71:a4:24:4f:8c:dc:3c:82:07:5f:66:dc:7d:10:fe:
         0c:61:b3:05:95:ee:e1:ae:81:0f:a8:f8:c7:8f:4d:a8:23:02:
         26:6b:1d:83:52:55:ce:b5:2f:00:ca:80:40:e0:e1:74:ac:60:
         f5:87:80:9d:ae:36:64:91:5d:b0:68:18:ea:8a:61:c9:77:a8:
         97:c4:c9:c7:a5:fc:55:4b:f3:f0:7f:b9:65:3d:27:68:d0:cc:
         6b:fa:53:9d:e1:91:1a:c9:5d:1a:96:6d:32:87:ed:03:20:c8:
         02:ce:5a:be:d9:ea:fd:b2:4d:c4:2f:1b:df:5f:7a:f5:f8:8b:
         c6:ee:31:3a:25:51:55:67:8d:64:32:7b:e9:9e:c3:82:ba:2a:
         2d:e9:1e:b4:e0:48:06:a2:fc:67:af:1f:22:02:73:fb:20:0a:
         af:9d:54:4b:a1:cd:ff:60:47:b0:3f:5d:ef:1b:56:bd:97:21:
         96:2d:0a:d1:5e:9d:38:02:47:6c:b9:f4:f6:23:25:b8:a0:6a:
         9a:2b:77:08:fa:c4:b1:28:90:26:58:08:3c:e2:7e:aa:d7:3d:
         6f:ba:31:88:0a:05:eb:27:b5:a1:49:ee:a0:45:54:7b:e6:27:
         65:99:20:21:a8:a3:bc:fb:18:96:bb:52:6f:0c:ed:83:51:4c:
         e9:59:e2:20:60:c5:c2:65:92:82:8c:f3:10:1f:0e:8a:97:be:
         77:82:6d:3f:8f:1d:5d:bc:49:27:bd:cc:4f:0f:e1:ce:76:86:
         04:23:c5:c0:8c:12:5b:fd:db:84:a0:24:f1:48:ff:64:7c:d0:
         be:5c:16:d1:ef:99:ad:c0:1f:fb:cb:ae:bc:38:22:06:26:64:
         da:da:97:0e:3f:28:15:44:a8:4f:00:ca:f0:9a:cc:cf:74:6a:
         b4:3e:3c:eb:95:ec:b5:d3:5a:d8:81:99:e9:43:18:37:eb:b3:
         bb:d1:58:62:41:f3:66:d2:8f:aa:78:95:54:20:c3:5a:2e:74:
         2b:d5:d1:be:18:69:c0:ac:d5:a4:cf:39:ba:51:84:03:65:e9:
         62:c0:62:fe:d8:4d:55:96:e2:d0:11:fa:48:34:11:ec:9e:ed:
         05:1d:e4:c8:d6:1d:86:cb

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates