suasca.cer: CN=Strong User Authentication SubCA,OU=Canopus,O=Cisco (Intermediate Certificate, Expiring 2068-06-01) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://www.cisco.com/security/pki/certs/suasca.cer" --output cert.crt

Download certificate through wget:

wget -q "http://www.cisco.com/security/pki/certs/suasca.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:23:e4:97:33:d9:18:06:42
    Signature Algorithm: sha512WithRSAEncryption
        Issuer: OU=Betelgeuse, O=Cisco, CN=Strong Authentication Root CA
        Validity
            Not Before: Jun  1 19:22:28 2018 GMT
            Not After : Jun  1 18:55:17 2068 GMT
        Subject: O=Cisco, OU=Canopus, CN=Strong User Authentication SubCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:d3:39:a1:cf:50:d5:b7:b2:ba:8d:85:b8:0a:11:
                    82:fa:06:b7:e2:d1:4c:b5:2b:ef:a3:ea:8c:1b:9b:
                    5f:ae:5f:3d:b5:3f:61:cc:bd:7e:53:b0:4c:0d:94:
                    26:f9:33:90:fc:16:c3:44:f5:63:b8:1b:29:e5:e0:
                    98:0f:b2:66:3d:53:de:78:5c:00:e3:5f:fc:ec:2f:
                    de:6f:09:95:40:32:42:b7:8a:b2:cd:0e:7d:e1:47:
                    4b:57:65:64:a9:36:00:6d:a3:87:f4:79:8d:39:d5:
                    1b:05:f0:08:28:d2:fc:73:1f:ee:3e:2a:da:9a:59:
                    95:f0:62:ce:be:4d:5d:bd:26:4b:56:ff:b6:fd:f0:
                    80:71:46:5c:a6:00:f6:d1:87:2c:51:63:24:3a:e6:
                    1c:da:0c:21:7b:dc:45:f4:21:32:42:6f:63:03:ec:
                    ef:09:8d:73:1f:c7:7e:15:f0:d9:c8:7c:af:71:51:
                    ae:60:79:93:9d:af:97:d4:63:cd:c3:93:63:69:c5:
                    c6:15:e9:98:09:48:a1:5f:92:35:20:3b:35:f9:3d:
                    3e:94:67:f1:46:8b:a4:96:74:c6:f1:00:87:49:ee:
                    16:d2:d3:12:45:ca:d5:c6:79:7a:ac:31:e8:86:ed:
                    97:31:4e:0a:e8:ac:2e:dc:4c:5b:70:00:2d:98:eb:
                    6e:1c:c5:ee:60:1a:9c:cf:c7:3c:f2:de:34:13:58:
                    a6:d8:2a:99:29:1b:2c:b0:ce:65:8e:ea:89:67:8c:
                    7d:04:d6:ee:65:8e:8b:76:dd:a9:a3:1a:52:1b:12:
                    76:9c:ae:d5:3e:de:54:4c:41:d4:0c:41:a1:2a:28:
                    cf:42:e4:6e:d1:93:dc:6d:f0:65:ae:66:8c:aa:87:
                    b4:2c:6a:fe:cf:57:bd:15:0b:c2:81:06:53:64:c2:
                    5f:9e:44:c5:cb:a5:5b:1c:fb:12:7b:9f:6a:50:a2:
                    08:73:59:bb:3b:06:be:2e:71:f3:f9:1a:2d:f7:c6:
                    1b:86:38:fe:c5:d7:fe:ff:87:2d:34:ad:c6:8f:11:
                    37:09:26:5c:ac:93:80:2c:8b:11:4d:71:da:dc:4a:
                    1d:38:23:b0:95:3a:85:ba:d0:b7:c8:d5:c9:30:6e:
                    0f:86:5a:ae:69:2a:29:b0:2b:62:99:ba:96:f2:c5:
                    9a:6e:a4:c6:78:89:57:73:7d:82:c5:62:8f:73:83:
                    53:44:5e:b5:bf:13:3b:5d:cb:d5:11:62:37:f7:c9:
                    71:31:00:ed:48:f9:a7:e9:b3:28:98:16:ff:a6:7a:
                    aa:fd:9e:38:0d:ce:de:b2:38:6f:2f:cd:53:f4:f3:
                    58:cb:e1:26:3c:12:08:51:f7:fd:45:4d:98:fc:d1:
                    0d:d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                CA Issuers - URI:http://www.cisco.com/security/pki/certs/sarca.cer
                OCSP - URI:http://pkicvs.cisco.com/pki/ocsp

            X509v3 Authority Key Identifier: 
                keyid:4A:91:AB:66:F2:71:BF:C4:D0:0C:B2:C2:6F:C1:35:69:BC:4E:9D:22

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.9.21.1.44.0
                  CPS: http://www.cisco.com/security/pki/policies/

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://www.cisco.com/security/pki/crl/sarca.crl

            X509v3 Subject Key Identifier: 
                3C:F5:FF:55:BF:49:12:69:3E:CA:14:0F:3B:D6:74:3A:20:4E:82:77
    Signature Algorithm: sha512WithRSAEncryption
         19:ec:ab:46:44:ac:40:9f:a0:ab:42:b6:f3:45:0d:25:fa:3e:
         0a:71:52:2b:de:1a:66:36:46:40:fb:d1:53:9f:36:23:5c:83:
         c3:d5:b2:e3:0b:fa:ce:51:14:d5:fe:1b:bd:86:f5:ac:2d:d1:
         02:7c:f9:f1:30:90:de:73:0b:1a:b4:e3:a5:e8:50:a5:3e:b6:
         aa:b5:9f:2e:38:1f:c1:65:8a:82:4d:44:ce:d5:bc:97:37:a3:
         fd:ac:b2:57:e2:5d:b8:15:89:03:90:65:84:ed:79:ec:85:02:
         ce:50:2a:e1:d3:91:2b:48:5f:b3:16:35:26:89:a1:5c:22:44:
         39:ef:4c:48:67:37:2d:73:68:3d:6e:b5:67:8a:4b:5c:56:cb:
         88:52:d4:32:33:9b:fd:28:47:2d:54:a9:2f:cd:78:b0:94:73:
         c2:f2:34:e9:7a:8b:bf:d2:05:14:71:e9:4a:a2:fb:67:78:bb:
         22:64:14:5d:ac:50:09:1c:1c:47:6c:aa:3d:78:5e:97:10:42:
         da:6f:1e:72:7f:aa:81:b7:03:d7:aa:8d:1f:73:bc:fe:7f:1b:
         eb:7e:69:60:ba:f1:9e:a5:00:44:c8:da:a6:4e:ee:c6:a3:76:
         99:9c:bf:8f:6a:74:7d:79:fb:4d:08:f9:5b:bc:19:dd:e2:ee:
         64:22:b1:a5:c7:5c:0f:fd:41:c8:c6:ec:78:84:06:84:2e:91:
         e6:b3:a9:97:3d:7d:31:37:ab:d3:ec:b6:8e:8b:f1:7a:6f:e6:
         7b:ec:d9:56:5a:36:64:be:45:41:c8:8d:da:bc:c9:9e:0f:38:
         cb:69:98:ed:fa:61:57:5b:ca:6d:63:0e:7b:ec:80:ee:6f:40:
         a3:58:a3:5f:33:01:f7:fc:1f:c0:94:3d:51:b8:e9:e8:8b:d3:
         3e:92:6f:f9:2e:0f:d0:85:08:9b:cd:27:c9:09:e5:be:ad:44:
         1e:3c:69:29:48:46:a2:20:37:e6:f3:0c:50:78:2c:bc:8a:e6:
         10:d9:3a:25:14:74:96:67:0b:c4:be:d4:07:b0:4d:c7:7e:8b:
         09:8f:47:1d:8e:0e:41:18:be:38:48:6f:66:d1:cd:ea:ba:de:
         97:12:05:48:e9:d4:43:68:bd:46:2c:7a:ea:04:b5:e5:3d:c3:
         ea:b1:ba:14:ae:ca:66:7c:42:f8:49:fc:2a:6f:28:9b:e9:eb:
         28:48:1f:da:f5:5a:82:15:85:18:13:3c:0e:f3:71:71:52:cc:
         82:97:4e:96:81:5c:5a:49:32:27:0f:d4:5c:de:a8:d6:76:8a:
         4f:7f:d3:61:b3:87:2c:4c:e7:62:8d:a3:1a:33:75:45:99:c5:
         4c:21:33:e7:62:a4:b3:48

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06