ocspg2.crt: 2.5.4.97=VATRO-18288250,CN=certSIGN Validation Service,O=CERTSIGN SA,C=RO (Intermediate Certificate, Expiring 2020-02-27) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://crl.certsign.ro/ocspg2.crt" --output cert.crt

Download certificate through wget:

wget -q "http://crl.certsign.ro/ocspg2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:06:05:16:70:63:04:4f:8e:91:49:14:38:86:e1:ea:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RO, O=certSIGN, OU=certSIGN Qualified CA Class 3 G2, CN=certSIGN Qualified CA Class 3 G2
        Validity
            Not Before: Feb 27 14:56:22 2019 GMT
            Not After : Feb 27 14:56:22 2020 GMT
        Subject: C=RO, O=CERTSIGN SA, CN=certSIGN Validation Service/2.5.4.97=VATRO-18288250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:c9:94:67:78:f2:38:1c:6e:d8:8a:9b:5f:
                    17:50:f7:52:d5:32:dd:fa:38:c9:de:fd:38:f0:48:
                    93:15:c2:e1:45:b9:c1:04:d8:31:3b:b2:4a:e4:43:
                    a7:69:bf:b3:5a:41:01:4a:7b:a9:63:e7:0e:c3:4e:
                    10:3a:e6:02:3a:2b:60:6f:29:fb:41:6a:e7:09:5d:
                    c1:1a:d4:35:7c:e6:13:a2:ce:ab:ce:a7:c1:aa:18:
                    bc:90:7d:2d:83:53:a6:0e:3e:6c:80:1e:ea:1d:f3:
                    52:a3:bb:b5:b2:86:23:05:c2:90:d3:0c:63:a3:6e:
                    ed:c9:af:81:55:59:8a:11:dd:20:f8:21:b0:31:6d:
                    14:be:4a:32:bf:1d:7a:3c:2b:8c:1b:84:86:b4:52:
                    cf:bd:5d:68:3d:31:62:91:4b:aa:e2:93:da:04:71:
                    3a:f3:18:f8:fc:1a:2d:3f:0f:9e:79:22:09:6a:8a:
                    19:10:45:7f:9a:bb:f9:3f:63:28:8c:85:94:c5:a8:
                    48:e7:cb:63:1a:8c:44:0f:0b:05:68:0b:10:6d:71:
                    fb:e6:b2:45:be:84:c0:44:d9:5f:70:bc:f8:4b:e5:
                    25:d3:cf:00:b4:63:f9:19:dc:7e:15:2f:d7:1c:f3:
                    cf:ec:4d:21:1b:15:ea:d5:55:d8:dc:a4:b4:dd:26:
                    ce:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.certsign.ro
                CA Issuers - URI:http://www.certsign.ro/certcrl/qualifiedg2.crt

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Authority Key Identifier: 
                keyid:50:34:9E:53:76:B9:6D:D2:B7:0C:1E:90:83:75:5A:EE:CB:74:18:8A

            X509v3 Subject Key Identifier: 
                3C:76:7C:4A:3C:2D:6C:5A:82:C0:2D:62:F9:2E:17:89:E5:55:F0:B6
            X509v3 Certificate Policies: 
                Policy: 0.4.0.1456.1.1
                  CPS: http://www.certsign.ro/repository
                Policy: 1.3.6.1.4.1.25017.1.1.3
                  CPS: http://www.certsign.ro/repository

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.certsign.ro/qualifiedg2.crl

            X509v3 Subject Alternative Name: 
                othername:<unsupported>, email:office@certsign.ro
            X509v3 Extended Key Usage: 
                OCSP Signing
            OCSP No Check: 

    Signature Algorithm: sha256WithRSAEncryption
         bf:26:d0:e5:bf:20:99:81:ef:22:5f:47:b7:e5:93:a2:4a:d3:
         d0:94:fd:31:b4:b1:23:bc:6d:04:92:5d:65:3e:29:03:db:ba:
         13:b4:4f:6e:79:b1:1c:7c:c2:60:38:ab:d0:1b:33:58:6a:26:
         d1:e1:a9:39:c3:33:25:01:ac:e5:c3:d6:30:08:b3:3e:84:ff:
         d5:7a:c9:3d:01:7f:8e:0d:c7:58:e6:2c:1a:9f:30:2d:60:e5:
         73:b8:35:45:c9:a8:c3:49:16:3e:a2:49:af:75:7c:e5:4c:00:
         c7:35:20:05:f3:e1:e9:6e:61:a3:f3:5c:df:9e:8b:bb:7c:c9:
         6a:a0:ee:31:27:ef:39:e4:41:c3:fb:b7:e3:58:26:63:6a:5a:
         5f:b9:13:9e:aa:42:ca:fc:d2:f1:a9:18:19:a4:e0:fc:e6:df:
         ed:ce:5e:85:88:59:54:32:53:f9:3c:6e:9e:2e:3c:48:70:c0:
         d1:40:e2:72:88:11:25:a9:fe:99:7d:41:7e:05:ec:ae:3f:e4:
         a0:c2:04:f8:cd:4b:58:f3:51:78:54:af:83:16:dd:90:af:57:
         c4:c6:d8:e1:e7:c3:d9:2e:51:94:ce:45:9f:63:dd:c8:d1:0f:
         f3:79:7a:5f:56:46:12:c4:80:bf:37:36:95:1b:d3:4b:88:71:
         b6:29:67:45

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06