SectigoECCOrganizationValidationSecureServerCA.crt: CN=Sectigo ECC Organization Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB (Intermediate Certificate, Expiring 2030-12-31) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: http://crt.sectigo.com/SectigoECCOrganizationValidationSecureServerCA.crt (in DER format )
Serial Number : 71437980826369674525412024444231136103
SHA-1 Fingerprint : c8af0b661078fa075b5b4e80ff37e0597bc8ce93
SHA-1 Fingerprint : c8:af:0b:66:10:78:fa:07:5b:5b:4e:80:ff:37:e0:59:7b:c8:ce:93
SHA-256 Fingerprint : 3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1
SHA-256 Fingerprint : 34:57:10:67:52:40:02:12:90:3a:35:45:ca:3b:2e:f3:84:a4:56:97:2b:d9:51:d8:d8:40:c1:b0:a3:79:ef:a1
Signature Hash Algorithm : sha384
Subject : CN=Sectigo ECC Organization Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
- Country Name: GB (United Kingdom)
- State or Province Name: Greater Manchester
- Locality: Salford
- Organization: Sectigo Limited
- Common Name: Sectigo ECC Organization Validation Secure Server CA
Not Valid Before: 2018-11-02 00:00:00
Not Valid After: 2030-12-31 23:59:59
Issuer (Parent Certificate):
- Issuer Name: CN=USERTrust ECC Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=USERTrust ECC Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US .

Download certificate through curl:

curl -sSL "http://crt.sectigo.com/SectigoECCOrganizationValidationSecureServerCA.crt" --output cert.crt

Download certificate through wget:

wget -q "http://crt.sectigo.com/SectigoECCOrganizationValidationSecureServerCA.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:be:74:63:8c:b3:e9:de:28:05:70:b7:97:80:b3:67
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority
        Validity
            Not Before: Nov  2 00:00:00 2018 GMT
            Not After : Dec 31 23:59:59 2030 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo ECC Organization Validation Secure Server CA
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:9c:8e:5c:0a:61:6f:a1:58:a3:d0:d5:ce:fa:fc:
                    44:f9:ff:ba:06:1e:7b:16:1a:72:1f:42:d3:0a:b2:
                    66:cd:fb:0f:49:72:21:4d:27:b1:af:dd:87:3a:5c:
                    fe:68:7a:a8:18:4d:2f:49:ef:c2:4b:02:c5:a1:67:
                    19:f1:6d:63:39
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A

            X509v3 Subject Key Identifier: 
                4D:4A:EF:C4:46:B3:12:AD:4F:4E:9A:B1:59:E2:51:AB:08:10:78:08
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                Policy: 2.23.140.1.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/USERTrustECCCertificationAuthority.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/USERTrustECCAddTrustCA.crt
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: ecdsa-with-SHA384
         30:66:02:31:00:e9:3f:fe:ea:3b:8b:f3:28:78:a7:5c:c9:ea:
         af:8c:e5:ec:04:91:46:2c:8f:b5:8b:47:7e:4e:dc:bb:cc:49:
         e7:db:0e:03:35:2d:b5:4c:af:30:99:8d:ca:8e:6d:c4:99:02:
         31:00:f2:35:a8:73:3f:23:e3:92:fa:1c:74:39:98:46:7c:3a:
         0d:89:f4:de:fc:6c:60:59:9d:60:39:84:0a:ce:7e:a5:c0:fd:
         32:18:a9:6b:3f:ee:ef:ad:50:bc:21:cc:c9:e0

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates