6E47A9CCB45A29C7B078D01BA3211261.der: CN=GTS X3,O=Google Trust Services LLC,C=US (Intermediate Certificate, Expiring 2026-06-22) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/6E47A9CCB45A29C7B078D01BA3211261.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/6E47A9CCB45A29C7B078D01BA3211261.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:47:a9:cc:b4:5a:29:c7:b0:78:d0:1b:a3:21:12:61
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS Root R3
        Validity
            Not Before: Jun 22 00:00:00 2016 GMT
            Not After : Jun 22 00:00:00 2026 GMT
        Subject: C=US, O=Google Trust Services LLC, CN=GTS X3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:3e:e1:42:39:35:2c:b6:fc:94:ef:71:0c:
                    b2:3c:d9:77:35:2b:9e:92:75:60:69:92:85:fb:58:
                    72:cd:df:63:76:b0:11:09:c3:76:7c:c6:0d:63:a2:
                    f4:82:10:e8:1a:31:34:42:1c:38:43:6d:95:8d:02:
                    54:13:ed:da:11:94:3d:45:4f:b2:96:7b:0e:0c:81:
                    6f:a7:1a:48:18:f7:ef:f7:9a:69:59:e2:49:d4:9b:
                    bb:cd:e1:0b:8b:92:df:07:63:b3:3e:62:76:67:be:
                    2b:b6:6a:a2:f3:87:cd:d8:bc:0b:f6:df:7b:8e:f9:
                    ac:25:d2:de:ee:7c:e9:4d:e9:af:1d:dd:29:6c:38:
                    b8:7b:53:0a:5c:14:62:ab:0d:f8:cf:ea:5b:c9:80:
                    9d:9c:70:44:53:65:20:0a:fe:a9:6d:1b:7e:29:ef:
                    7d:78:ef:3d:9b:f0:73:b7:79:28:0a:8a:7d:f2:3e:
                    65:d3:7e:a2:a0:1d:14:2e:0f:30:bb:57:32:56:91:
                    b4:c2:07:63:53:13:9a:09:2b:b5:03:43:8f:32:8c:
                    cf:e0:db:ba:f7:58:89:fd:0b:49:57:ee:ef:3d:ab:
                    66:88:f5:38:3f:db:1e:d5:50:82:e7:35:36:c7:43:
                    f4:2a:f0:33:30:6a:09:bf:4e:07:08:47:ca:4c:cf:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                9F:98:B3:74:B5:17:3C:32:3A:FE:F4:F6:64:B1:B1:68:C3:80:C0:5A
            X509v3 Authority Key Identifier: 
                keyid:C1:F1:26:BA:A0:2D:AE:85:81:CF:D3:F1:2A:12:BD:B8:0A:67:FD:BC

            Authority Information Access: 
                OCSP - URI:http://ocsp.pki.goog/gtsr3

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.pki.goog/gtsr3/gtsr3.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://pki.goog/repository/

    Signature Algorithm: ecdsa-with-SHA256
         30:64:02:30:0e:f9:2a:2d:05:61:35:0a:07:98:f3:8f:36:e5:
         19:f7:f2:70:21:0f:c1:a2:b8:1d:e6:3d:bd:b0:ab:07:b0:0e:
         42:80:30:19:f1:d3:0c:53:56:f0:0a:9d:87:31:58:00:02:30:
         2a:81:9d:51:0f:b4:38:b7:3b:4f:3c:d1:5a:98:fa:e4:fa:0b:
         8f:77:0f:b0:4c:35:40:a7:b4:e8:1d:45:e3:51:e2:c8:29:23:
         5b:07:a6:15:b4:a9:3c:e9:ca:f4:69:99

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06