01E3AE8026DB5B41E256C2A351.der: CN=Google Internet Authority G3 ECC,O=Google Trust Services,C=US (Intermediate Certificate, Expiring 2027-06-15) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/01E3AE8026DB5B41E256C2A351.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/01E3AE8026DB5B41E256C2A351.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e3:ae:80:26:db:5b:41:e2:56:c2:a3:51
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign
        Validity
            Not Before: Jun 15 00:00:42 2017 GMT
            Not After : Jun 15 00:00:42 2027 GMT
        Subject: C=US, O=Google Trust Services, CN=Google Internet Authority G3 ECC
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:1b:80:0d:28:9a:f0:96:90:0f:5d:38:51:70:0d:
                    d9:e1:76:e4:c1:0b:d6:86:3e:49:fe:48:9c:5e:96:
                    c1:41:c9:52:e2:ec:ae:43:98:92:38:62:9c:b8:24:
                    6d:f2:b6:a5:a9:11:09:5e:e4:6c:9c:b6:68:d2:c2:
                    13:eb:cd:3e:55
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                64:B8:34:04:8E:DE:E3:2A:54:39:A4:3E:C7:9B:D8:00:0F:0C:22:E4
            X509v3 Authority Key Identifier: 
                keyid:54:B0:7B:AD:45:B8:E2:40:7F:FB:0A:6E:FB:BE:33:C9:3C:A3:84:D5

            Authority Information Access: 
                OCSP - URI:http://ocsp.pki.goog/gsr4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.pki.goog/gsr4/gsr4.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: https://pki.goog/repository/

    Signature Algorithm: ecdsa-with-SHA256
         30:46:02:21:00:a6:e0:1d:f1:71:77:c0:f7:93:34:e2:c6:38:
         ec:cc:f1:b0:56:ec:eb:d9:c5:9a:09:53:03:9b:a9:a4:d2:f8:
         b2:02:21:00:ac:f2:b7:2b:16:a0:5c:6f:1b:60:6f:b7:94:77:
         a6:9e:02:e0:e3:ea:2b:de:4b:3d:87:74:ff:54:92:0a:26:77

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06