aaacertificateservices_2.crt: CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB (Intermediate Certificate, Expiring 2020-05-30) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://support.comodo.com/index.php?/Knowledgebase/Article/GetAttachment/952/51&name=/aaacertificateservices_2.crt" --output cert.crt

Download certificate through wget:

wget -q "https://support.comodo.com/index.php?/Knowledgebase/Article/GetAttachment/952/51&name=/aaacertificateservices_2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c7:d2:01:34:cd:0d:c2:98:87:b1:c3:c0:61:df:88
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
        Validity
            Not Before: May 30 10:48:38 2008 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:2e:d1:3f:51:8f:37:99:5d:76:6c:f8:e1:
                    23:02:93:44:2b:4c:88:f2:50:04:90:c6:d7:ca:d7:
                    40:fe:cd:17:da:94:6b:73:f0:3d:0a:9b:23:dd:98:
                    18:07:62:a8:6e:11:99:78:3d:72:90:14:96:71:fe:
                    fa:8f:f5:03:84:8e:fb:85:a5:c5:e4:f7:ed:e4:78:
                    be:df:aa:c7:9c:c7:9f:df:21:df:7d:cf:60:d4:70:
                    bb:d4:ca:a6:5b:b9:d7:0e:6e:94:55:76:2d:19:8c:
                    95:3a:26:2e:91:67:93:67:27:fe:94:0a:48:62:9d:
                    8f:98:e1:25:63:4b:be:2b:92:36:4f:11:48:39:66:
                    e1:b1:1c:26:35:56:e9:3d:db:8e:ff:1f:6e:24:63:
                    0f:75:75:53:17:48:5c:30:8f:d0:04:ba:5e:c3:e9:
                    db:2f:1d:18:06:16:71:ff:8a:f6:99:c1:79:5f:82:
                    ed:d8:a0:2f:46:06:a4:eb:29:e6:8e:fd:52:8d:bd:
                    83:57:d0:2f:71:15:0e:cc:0b:f6:8e:fa:ab:0e:fa:
                    a0:ac:68:97:ad:fd:59:fc:19:13:33:7b:0b:83:6a:
                    90:63:55:26:e7:78:05:8a:b8:1c:ef:75:c1:c2:27:
                    9f:4e:97:04:29:d0:97:c1:41:d8:bc:0f:13:dc:a2:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A

            X509v3 Subject Key Identifier: 
                30:43:DC:64:CD:19:5C:A9:F3:19:D2:37:09:96:91:9E:0C:E8:D6:3D
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/AddTrustExternalCARoot.p7c
                CA Issuers - URI:http://crt.usertrust.com/AddTrustUTNSGCCA.crt
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         72:1c:98:91:8c:c2:75:7e:cd:55:37:cf:47:0c:80:50:49:a3:
         89:fd:bd:ad:91:2c:b7:56:ae:e0:7b:5a:a8:90:82:e5:e0:cc:
         ee:61:f1:43:c4:76:45:9f:3c:75:41:24:73:5a:4f:26:0b:ac:
         be:b5:23:b6:60:35:fc:a2:4f:11:28:5c:4a:b4:c8:4c:92:ca:
         16:39:f3:82:99:9c:74:e1:32:13:1f:af:d3:e2:2c:74:ed:b9:
         6f:f0:62:fb:90:db:21:02:60:e1:04:02:34:a3:cd:f8:ba:47:
         e5:d7:79:82:cd:ea:6a:d7:51:5d:e1:2f:77:f4:44:0e:12:b7:
         46:cc:65:96:05:ac:4a:b9:b7:12:bc:94:9f:5c:3b:dd:de:41:
         59:d2:5f:d7:75:27:07:53:aa:be:f0:93:4b:22:aa:1f:f1:e0:
         89:68:61:c2:30:2e:ac:5d:59:0b:0f:c8:72:9b:de:5e:de:74:
         1d:2e:4c:59:c3:25:5c:3b:b9:73:55:e7:a3:dc:0f:20:19:51:
         0a:39:b9:4f:91:a1:11:f2:63:1d:c9:bb:48:0d:84:61:96:60:
         75:d0:35:6b:03:c4:fc:35:ad:0c:30:61:48:3f:b7:cb:32:4c:
         d5:51:df:c1:16:d6:04:9e:07:a2:83:30:97:c7:23:09:17:9a:
         dd:ba:ff:a1

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06