ssca.cer: CN=Cisco SSCA,O=Cisco Systems (Intermediate Certificate, Expiring 2012-04-05) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.cisco.com/security/pki/certs/ssca.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.cisco.com/security/pki/certs/ssca.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d0:1e:47:40:00:00:01:11:c3:8a:96:44:00:00:00:02
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: O=Digital Signature Trust Co., CN=DST Root CA X3
        Validity
            Not Before: Apr  5 20:58:31 2007 GMT
            Not After : Apr  5 20:58:31 2012 GMT
        Subject: O=Cisco Systems, CN=Cisco SSCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:7d:49:34:fa:03:3b:fa:55:8c:fd:10:c1:
                    62:21:86:04:bb:0a:ae:2a:85:72:ed:94:87:5b:21:
                    15:48:ba:fe:62:7f:49:aa:4e:1a:8a:02:0a:f9:3f:
                    b0:f4:7c:cc:d7:0f:2d:74:cf:bd:41:59:3c:3f:a4:
                    c6:2e:08:ba:3f:6d:93:ba:a3:a1:eb:db:17:e4:fe:
                    1c:09:e9:3f:ae:42:8a:0d:a7:08:04:ed:ed:99:3e:
                    f1:d5:45:2d:e3:7b:21:53:7c:5d:a7:3d:f0:34:59:
                    5e:17:64:ed:ee:fc:63:83:97:a5:f0:74:de:c3:57:
                    12:c4:4c:bb:14:d9:ef:ad:11:9f:6e:49:e2:44:03:
                    59:2f:09:78:c8:c8:56:1a:94:98:20:08:5f:fc:15:
                    22:47:b8:44:03:b5:8a:ae:ab:74:d6:1b:32:5e:ab:
                    fa:e7:81:48:37:b6:c7:bf:37:b1:38:1d:32:ee:2b:
                    61:bd:2a:a2:6a:f2:bb:56:c9:6f:ef:7b:91:7b:db:
                    72:25:fc:ab:40:45:32:e1:f7:c7:aa:23:29:46:44:
                    74:ae:e9:46:60:61:b5:cd:bb:ea:74:8c:7a:8f:b4:
                    39:44:43:86:27:b5:18:6f:59:43:00:d3:fd:85:6d:
                    7a:5c:8a:c7:7c:07:9a:22:56:90:8e:45:00:1b:fb:
                    53:db
                Exponent: 3 (0x3)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.9.21.1.1.0
                  CPS: http://www.cisco.com/security/pki/policies/index.html

            X509v3 Subject Key Identifier: 
                16:E1:B6:87:6A:17:7C:3A:23:B6:3E:BF:70:0F:4B:98:EF:57:5C:88
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.identrust.com/DSTROOTCAX3.crl

            Authority Information Access: 
                OCSP - URI:http://ocspts.identrust.com
                CA Issuers - URI:http://apps.identrust.com/roots/DSTROOTCAX3.cer

            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication, Code Signing, E-mail Protection, IPSec End System, IPSec Tunnel, IPSec User, Time Stamping, OCSP Signing, Microsoft Trust List Signing, 1.3.6.1.4.1.311.10.3.9, 1.3.6.1.4.1.311.20.2.1, 1.3.6.1.4.1.311.21.6
            X509v3 Authority Key Identifier: 
                keyid:C4:A7:B1:A4:7B:2C:71:FA:DB:E1:4B:90:75:FF:C4:15:60:85:89:10

    Signature Algorithm: sha1WithRSAEncryption
         0f:eb:32:1c:05:aa:20:57:82:e2:4e:c4:42:b6:e4:62:5d:ed:
         8e:08:03:e2:23:36:96:44:ae:1c:82:15:54:4c:06:d2:c4:af:
         43:45:19:76:a6:5d:9e:f3:2c:73:57:bd:33:57:ca:c3:f1:3e:
         c0:b5:63:9b:0c:37:b4:3b:03:c2:10:e9:5a:c0:49:d7:df:75:
         e0:6e:ce:2c:4b:1a:aa:78:b3:3b:8c:cf:9a:03:0c:12:1d:5b:
         b7:c0:39:e6:2d:04:23:46:9c:76:6f:b9:63:a7:77:84:af:87:
         e2:16:e4:fb:bc:c3:7d:6f:d9:c8:4a:2d:f7:95:5c:73:2f:2e:
         45:d4:f6:e9:0c:78:dd:89:d0:6e:11:cd:8f:f1:6a:d7:2b:9c:
         a0:82:b6:b1:d9:64:18:d5:e3:38:7d:f8:34:0e:9a:d0:e5:94:
         7d:bf:be:8d:3f:b4:60:6a:62:d7:11:53:cb:a0:ce:5e:c0:71:
         44:d9:54:bb:52:b6:ce:15:90:17:c2:89:e2:6f:c5:9f:db:d6:
         1c:2f:27:8d:14:64:c1:fd:20:c9:76:13:5c:8c:1f:d5:b9:ca:
         cb:56:bc:1f:84:a4:7f:3d:d8:32:c9:aa:3a:a6:6b:f5:89:ee:
         d2:ef:6b:b7:a0:ca:f4:3b:b2:16:74:c4:38:31:d2:7b:30:cb:
         c4:1f:14:40

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06