root_ca_2_pem.crt: CN=Hongkong Post Root CA 2,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Root Certificate, Expiring 2040-09-05) detail info and audit record

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

• Certificate Download URL: http://www1.ecert.gov.hk/root/root_ca_2_pem.crt (in PEM format )
• Serial Number : 597436759295277226594305556793599717830835142652
• SHA-1 Fingerprint : de010808e41ec41930d44095f8fe596b582c8ca2
• SHA-1 Fingerprint : de:01:08:08:e4:1e:c4:19:30:d4:40:95:f8:fe:59:6b:58:2c:8c:a2
• SHA-256 Fingerprint : 3945e08a8d4a0554b7605a7b355b10188e3ef842c76a805c54e3657c4d041aaa
• SHA-256 Fingerprint : 39:45:e0:8a:8d:4a:05:54:b7:60:5a:7b:35:5b:10:18:8e:3e:f8:42:c7:6a:80:5c:54:e3:65:7c:4d:04:1a:aa
• Signature Hash Algorithm : sha256
• Subject : CN=Hongkong Post Root CA 2,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK
  • Country Name: HK (Hong Kong)
  • State or Province Name: Hong Kong
  • Locality: Hong Kong
  • Organization: Hongkong Post
  • Common Name: Hongkong Post Root CA 2
• Not Valid Before: 2015-09-05 02:34:36
• Not Valid After: 2040-09-05 02:34:36
• Issuer (Parent Certificate):
  • Issuer Name: CN=Hongkong Post Root CA 2,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK
  • Issuer Certificate URL: NA
• Audit Record:
  • Revocation Status: Root Certificate
  • Certificate Policy (CP) URL: Unknown
  • Certificate Practice Statement (CPS) URL: https://www.ecert.gov.hk/product/cps/ecert/img/orgrole_cps_en12.pdf https://www.ecert.gov.hk/product/cps/gcert/img/gcert_cps_en4.pdf https://www.ecert.gov.hk/product/cps/ecert/img/cps_en56.pdf
  • Auditor: PwC - PricewaterhouseCoopers International Limited
  • Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=19f66d05-8f61-4753-8b97-b5121e9f3d4f
  • Standard Audit Period Start Date: 2021.01.01
  • Standard Audit Period End Date: 2021.12.31
  • Standard Audit Statement Date: 2022.02.28
  • Standard Audit Type: WebTrust
  • Full CRL Issued By This CA: http://crl1.ecert.gov.hk/crl/RootCA2ARL.crl

Download certificate through curl:

curl -sSL "http://www1.ecert.gov.hk/root/root_ca_2_pem.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www1.ecert.gov.hk/root/root_ca_2_pem.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a5:fd:a6:d0:1c:5e:3f:cf:e4:f9:99:df:7a:6c:6f:39:a9:7f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 2
        Validity
            Not Before: Sep  5 02:34:36 2015 GMT
            Not After : Sep  5 02:34:36 2040 GMT
        Subject: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:e2:72:ec:f0:47:10:22:c3:44:ca:05:79:5b:59:
                    d8:3a:2b:24:21:24:ea:af:88:f8:7d:5a:05:65:c3:
                    18:48:01:04:c1:7e:5a:03:35:79:4a:c3:c1:62:5b:
                    d2:5e:82:f7:0c:fb:b9:fe:d2:21:1d:5c:87:bc:26:
                    e3:c4:a6:7b:99:53:97:04:d8:df:12:4a:3e:65:45:
                    e7:ce:1b:65:a9:70:39:96:16:62:81:cc:e9:e0:1b:
                    82:bb:ed:a8:e0:42:6b:e9:ba:c9:1b:4b:48:fd:9d:
                    46:12:40:e5:28:d3:4c:47:fa:62:88:67:84:0d:57:
                    4c:0f:71:a9:85:7f:56:e5:16:e8:a3:42:ba:47:b6:
                    dd:e8:e3:6a:f7:0a:69:e5:f3:14:e3:5c:55:dd:87:
                    ff:7e:3c:5c:4d:f9:c9:1b:0e:9b:4e:ee:7e:ac:ec:
                    4d:d3:a2:23:b7:88:9b:79:a0:8a:63:47:1e:74:57:
                    bd:c7:ae:fd:94:ae:1d:4a:45:c3:c7:f6:a5:53:07:
                    d5:69:f8:73:e5:66:37:b6:a5:30:77:aa:cc:ba:f0:
                    09:c5:28:57:83:f0:a2:19:f2:7e:45:b4:6c:eb:49:
                    22:ba:8e:3a:23:1c:1d:89:b2:8f:69:44:13:28:ba:
                    62:55:11:82:8e:59:7e:7c:4d:ba:87:b7:ee:33:de:
                    cd:d9:c2:f1:94:2d:53:3b:a4:d0:16:54:0f:11:21:
                    0a:7e:58:c3:ae:82:c1:c4:d5:25:77:0f:76:db:0d:
                    5e:f7:62:33:b5:a7:fc:ca:1e:f3:86:8a:53:88:dd:
                    c2:32:1f:3e:76:de:9f:8f:0c:8a:4a:50:2d:c8:50:
                    51:06:05:41:57:9b:a4:76:d0:1c:c6:6e:16:48:26:
                    cf:32:47:59:16:93:4b:4a:d4:9f:ba:7e:ed:1f:f3:
                    05:77:43:c7:2d:62:f1:60:d5:8c:28:f1:fe:16:23:
                    82:cf:5a:6b:9f:6e:69:fc:d4:a8:49:57:f7:3e:92:
                    09:44:c2:5d:28:bd:2a:54:33:88:9a:9e:97:4d:2c:
                    af:bd:0b:7d:4a:3b:53:44:bd:c2:c1:2d:d5:34:cf:
                    02:a0:14:09:51:4a:8a:c2:aa:00:11:6e:9a:d1:1d:
                    d7:3c:d9:f1:c1:7e:d8:19:50:12:c4:91:2b:61:05:
                    6d:fb:32:8f:87:ac:7a:c0:95:b6:8d:07:f5:28:ee:
                    bd:68:8b:ef:fe:4d:06:43:cd:17:25:a0:fe:e2:54:
                    26:b4:e5:f8:90:fb:0d:d8:a2:0c:31:73:94:4d:7b:
                    fb:52:14:ab:65:51:0a:03:da:f2:66:03:92:df:7c:
                    45:97:1b:4e:3d:7b:10:51:a7:e9:83:8d:b9:3f:b4:
                    92:d1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Authority Key Identifier: 
                keyid:61:B5:E0:42:DE:B6:AF:A7:20:EA:F6:24:C8:A7:9D:85:A0:58:53:D8

            X509v3 Subject Key Identifier: 
                61:B5:E0:42:DE:B6:AF:A7:20:EA:F6:24:C8:A7:9D:85:A0:58:53:D8
    Signature Algorithm: sha256WithRSAEncryption
         7a:a7:8b:dc:ed:66:f6:dd:c9:10:df:50:f1:d1:90:32:3d:8f:
         da:91:b2:c7:53:ae:71:f9:a7:ec:c4:68:e2:0e:fa:8e:1a:5f:
         2a:92:e3:83:d1:fc:da:f2:e5:7a:c8:ac:a4:17:2d:e6:b8:dd:
         ec:2a:17:51:a2:75:69:28:39:ba:58:3f:1f:50:b3:ed:c3:19:
         b7:16:f5:c6:a8:5a:3d:a0:d0:77:3f:51:07:45:ac:6f:9f:94:
         cb:bf:6c:2e:0f:89:09:92:34:19:39:ed:7a:b2:59:65:b0:76:
         ed:27:46:1d:43:cf:d4:36:bc:68:8a:9b:d4:db:c2:2b:3f:ce:
         5d:54:99:ca:22:c1:79:84:98:ff:ba:41:58:bf:45:49:99:bb:
         09:1b:96:8e:58:4c:fa:c8:48:42:94:1b:89:c9:f9:52:66:cb:
         9d:6d:c4:0d:e9:bc:5f:37:d5:ba:08:61:ff:d5:4b:8c:63:e8:
         fe:f7:e0:dc:19:13:e9:52:6a:b6:81:2c:18:64:6c:de:d8:30:
         57:ff:8b:19:c7:bf:b7:72:5e:56:ae:c3:f6:19:d2:fd:ae:e9:
         b6:a5:31:b8:32:4e:c9:bc:3a:1b:29:1f:89:61:b0:fb:c7:fb:
         88:06:29:c3:56:a6:4d:62:10:f0:ab:51:b7:64:f4:24:53:90:
         83:3a:a7:ae:a9:11:02:e0:82:54:23:bd:04:be:34:b4:ce:d9:
         aa:3e:54:9a:48:02:8b:21:18:12:f8:98:e0:aa:aa:f9:ab:ae:
         2b:bf:b5:6b:83:9f:22:d0:58:58:05:16:a7:dd:c7:93:e9:7b:
         84:28:e2:d5:ee:a8:35:f9:cc:ce:b6:f0:27:50:51:33:87:32:
         d4:64:72:88:d8:35:40:b7:ad:9b:ee:5a:14:a9:7e:80:98:3d:
         5d:d1:77:74:ca:f8:91:86:d7:42:e9:dc:a0:ef:30:25:9f:c8:
         3a:60:68:0f:2d:51:f8:f1:96:b0:45:f4:80:a8:b4:91:87:29:
         43:29:91:39:83:35:62:6d:b8:e9:fc:f8:fe:9a:4e:28:64:7e:
         0d:90:69:03:f2:ab:4d:3e:4e:d1:8e:27:03:44:97:60:da:78:
         8a:65:8d:16:75:fc:0e:2c:72:9b:78:8a:67:62:b1:ae:2c:46:
         05:90:11:38:57:d7:76:29:23:a8:c0:7d:09:df:87:ab:da:5b:
         1f:7a:13:33:81:b2:f7:fe:1c:ef:c2:9e:65:5f:e4:19:e9:72:
         af:c8:35:1c:be:fb:d3:f8:dd:e4:d8:c3:39:4e:d9:43:60:ab:
         75:36:57:1b:cb:05:5a:d8:43:fc:37:25:57:1a:3d:b5:56:eb:
         f2:ef:db:26:30:b1:a0:ee

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIFzzCCA7egAwIBAgIUaKX9ptAcXj/P5PmZ33psbzmpf/wwDQYJKoZIhvcNAQEL
BQAwbzELMAkGA1UEBhMCSEsxEjAQBgNVBAgTCUhvbmcgS29uZzESMBAGA1UEBxMJ
SG9uZyBLb25nMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25n
a29uZyBQb3N0IFJvb3QgQ0EgMjAeFw0xNTA5MDUwMjM0MzZaFw00MDA5MDUwMjM0
MzZaMG8xCzAJBgNVBAYTAkhLMRIwEAYDVQQIEwlIb25nIEtvbmcxEjAQBgNVBAcT
CUhvbmcgS29uZzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMXSG9u
Z2tvbmcgUG9zdCBSb290IENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQDicuzwRxAiw0TKBXlbWdg6KyQhJOqviPh9WgVlwxhIAQTBfloDNXlKw8Fi
W9JegvcM+7n+0iEdXIe8JuPEpnuZU5cE2N8SSj5lRefOG2WpcDmWFmKBzOngG4K7
7ajgQmvpuskbS0j9nUYSQOUo00xH+mKIZ4QNV0wPcamFf1blFuijQrpHtt3o42r3
Cmnl8xTjXFXdh/9+PFxN+ckbDptO7n6s7E3ToiO3iJt5oIpjRx50V73Hrv2Urh1K
RcPH9qVTB9Vp+HPlZje2pTB3qsy68AnFKFeD8KIZ8n5FtGzrSSK6jjojHB2Jso9p
RBMoumJVEYKOWX58TbqHt+4z3s3ZwvGULVM7pNAWVA8RIQp+WMOugsHE1SV3D3bb
DV73YjO1p/zKHvOGilOI3cIyHz523p+PDIpKUC3IUFEGBUFXm6R20BzGbhZIJs8y
R1kWk0tK1J+6fu0f8wV3Q8ctYvFg1Ywo8f4WI4LPWmufbmn81KhJV/c+kglEwl0o
vSpUM4ianpdNLK+9C31KO1NEvcLBLdU0zwKgFAlRSorCqgARbprRHdc82fHBftgZ
UBLEkSthBW37Mo+HrHrAlbaNB/Uo7r1oi+/+TQZDzRcloP7iVCa05fiQ+w3Yogwx
c5RNe/tSFKtlUQoD2vJmA5LffEWXG049exBRp+mDjbk/tJLRHwIDAQABo2MwYTAP
BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBxjAfBgNVHSMEGDAWgBRhteBC
3ravpyDq9iTIp52FoFhT2DAdBgNVHQ4EFgQUYbXgQt62r6cg6vYkyKedhaBYU9gw
DQYJKoZIhvcNAQELBQADggIBAHqni9ztZvbdyRDfUPHRkDI9j9qRssdTrnH5p+zE
aOIO+o4aXyqS44PR/Nry5XrIrKQXLea43ewqF1GidWkoObpYPx9Qs+3DGbcW9cao
Wj2g0Hc/UQdFrG+flMu/bC4PiQmSNBk57XqyWWWwdu0nRh1Dz9Q2vGiKm9Tbwis/
zl1UmcoiwXmEmP+6QVi/RUmZuwkblo5YTPrISEKUG4nJ+VJmy51txA3pvF831boI
Yf/VS4xj6P734NwZE+lSaraBLBhkbN7YMFf/ixnHv7dyXlauw/YZ0v2u6balMbgy
Tsm8OhspH4lhsPvH+4gGKcNWpk1iEPCrUbdk9CRTkIM6p66pEQLgglQjvQS+NLTO
2ao+VJpIAoshGBL4mOCqqvmrriu/tWuDnyLQWFgFFqfdx5Ppe4Qo4tXuqDX5zM62
8CdQUTOHMtRkcojYNUC3rZvuWhSpfoCYPV3Rd3TK+JGG10Lp3KDvMCWfyDpgaA8t
UfjxlrBF9ICotJGHKUMpkTmDNWJtuOn8+P6aTihkfg2QaQPyq00+TtGOJwNEl2Da
eIpljRZ1/A4scpt4imdisa4sRgWQEThX13YpI6jAfQnfh6vaWx96EzOBsvf+HO/C
nmVf5Bnpcq/INRy++9P43eTYwzlO2UNgq3U2VxvLBVrYQ/w3JVcaPbVW6/Lv2yYw
saDu
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Related Certificates

• root_ca_1_pem.crt: CN=Hongkong Post Root CA 1,O=Hongkong Post,C=HK (Expiring: 2023-05-15)
• root_ca_3_pem.crt: CN=Hongkong Post Root CA 3,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Expiring: 2042-06-03)
• root_ca_3_x_gsca_r3_pem.crt: CN=Hongkong Post Root CA 3,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Expiring: 2029-03-18)
• ecert_ca_1-10_pem.crt: CN=Hongkong Post e-Cert CA 1 - 10,O=Hongkong Post,C=HK (Expiring: 2023-05-15)
• ecert_ca_1-14_pem.crt: CN=Hongkong Post e-Cert CA 1 - 14,O=Hongkong Post,C=HK (Expiring: 2023-05-15)
• ecert_ca_1-15_pem.crt: CN=Hongkong Post e-Cert CA 1 - 15,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Expiring: 2023-05-15)
• ecert_ca_1_pem.crt: CN=Hongkong Post e-Cert CA 1,O=Hongkong Post,C=HK (Expiring: 2013-05-15)
• ecert_ca_2-15_pem.crt: CN=Hongkong Post e-Cert CA 2 - 15,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Expiring: 2030-09-05)
• ecert_ca_2-17_pem.crt: CN=Hongkong Post e-Cert CA 2 - 17,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Expiring: 2032-08-12)
• ecert_ca_2-19_pem.crt: CN=Hongkong Post e-Cert CA 2 - 19,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Expiring: 2034-07-29)
• ecert_ev_ssl_ca_3-17_pem.crt: CN=Hongkong Post e-Cert EV SSL CA 3 - 17,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Expiring: 2032-06-03)
• ecert_ssl_ca_3-17_pem.crt: CN=Hongkong Post e-Cert SSL CA 3 - 17,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Expiring: 2032-06-03)