dvvroot3ec.crt: CN=DVV Gov. Root CA - G3 ECC,OU=Varmennepalvelut,OU=Certification Authority Services,O=Digi- ja vaestotietovirasto CA,C=FI (Root Certificate, Expiring 2042-05-05) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://dvv.fineid.fi/api/v1/cas/712/certificate?name=/dvvroot3ec.crt" --output cert.crt

Download certificate through wget:

wget -q "https://dvv.fineid.fi/api/v1/cas/712/certificate?name=/dvvroot3ec.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:79:40:a7:b5:da:7d:90:1c:a9:4b:f2:5a:ae:ae
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=FI, O=Digi- ja vaestotietovirasto CA, OU=Certification Authority Services, OU=Varmennepalvelut, CN=DVV Gov. Root CA - G3 ECC
        Validity
            Not Before: May  6 07:51:30 2021 GMT
            Not After : May  5 07:51:30 2042 GMT
        Subject: C=FI, O=Digi- ja vaestotietovirasto CA, OU=Certification Authority Services, OU=Varmennepalvelut, CN=DVV Gov. Root CA - G3 ECC
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:b3:2d:ca:3f:8a:ae:92:24:0a:92:ca:05:e6:e2:
                    6b:0d:7d:cf:2f:89:ab:a7:5a:55:f7:06:a6:60:5e:
                    a3:2e:af:48:6d:dd:0e:c4:33:2a:ca:ab:54:99:7a:
                    88:8a:cf:b3:2f:13:28:d6:dd:eb:b3:a8:d6:59:ca:
                    e7:c5:1a:0e:dc:8d:8a:ac:b0:6b:6d:51:86:ef:94:
                    4a:fa:e8:be:4b:ed:56:71:f0:1d:ea:4b:b5:f5:63:
                    59:12:b8:af:89:b1:30
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:B9:76:80:C3:83:F8:CF:22:DA:85:EB:CE:14:4E:55:AC:5E:5A:0A:90

            X509v3 Subject Key Identifier: 
                B9:76:80:C3:83:F8:CF:22:DA:85:EB:CE:14:4E:55:AC:5E:5A:0A:90
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:31:00:bc:25:ee:e1:56:5f:75:66:e8:40:21:d4:72:
         45:a5:5f:3b:77:fa:ce:c7:20:56:0e:79:68:a5:b1:be:f0:e2:
         f5:25:81:0c:8f:a2:68:c2:5d:c9:6a:45:3f:76:39:ad:24:02:
         30:44:83:68:e6:61:32:13:b1:85:f2:6d:d5:3c:b5:fe:87:b0:
         13:36:cc:57:f7:1e:3b:d9:6a:53:e4:1a:ea:40:fb:2d:bb:5d:
         ad:0b:ee:01:00:43:47:48:79:75:f8:be:73

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06