GEANTeScienceSSLCA4.crt: CN=GEANT eScience SSL CA 4,O=GEANT Vereniging,C=NL (Intermediate Certificate, Expiring 2033-05-01) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt" --output cert.crt

Download certificate through wget:

wget -q "http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:db:9a:38:06:d7:0a:c7:3e:38:d1:df:ef:6e:51:2a
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
        Validity
            Not Before: Feb 18 00:00:00 2020 GMT
            Not After : May  1 23:59:59 2033 GMT
        Subject: C=NL, O=GEANT Vereniging, CN=GEANT eScience SSL CA 4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:94:b4:18:5b:cb:91:d9:e1:dc:4d:b2:d4:74:39:
                    ac:45:fd:0a:c2:d0:51:0d:26:6e:7d:35:ae:4b:67:
                    33:f0:5e:ac:13:75:aa:b5:34:95:19:c0:c2:2b:1d:
                    35:da:bc:4c:50:a4:6a:b3:76:ac:08:28:d4:b4:96:
                    2c:8b:91:34:f9:e2:f4:ec:e5:53:e1:e5:26:11:16:
                    d5:40:5f:d3:4b:91:8f:9f:50:8b:b6:89:c3:84:19:
                    fc:25:3d:1e:95:95:8a:7e:92:24:76:56:3e:0e:c1:
                    88:72:68:cd:2d:8f:ae:ae:69:30:9a:02:3d:d1:cf:
                    df:5d:37:5b:3a:e1:9d:63:c3:fc:23:72:40:8b:6a:
                    df:cc:18:72:f8:72:b2:ae:40:4a:d8:c8:f7:e8:2b:
                    5b:37:f4:14:7f:81:78:ac:d0:4d:9a:9e:f7:e6:bb:
                    20:19:dd:80:ce:b0:0c:86:2a:93:e1:12:3d:c3:c6:
                    e8:b3:e7:ea:a9:a8:92:1e:3e:cd:d5:83:29:72:c7:
                    f6:48:a0:91:07:fe:30:2a:bf:b1:9b:75:54:ec:49:
                    fa:b2:32:59:f2:71:e1:74:a7:21:90:e9:8c:e9:d4:
                    39:0b:c3:80:e0:db:ac:e8:39:27:24:2d:87:88:0a:
                    d4:73:89:2c:33:ac:cb:b7:60:b6:16:54:1e:a1:d6:
                    bd:0d:c3:f8:67:b9:73:18:b7:a5:a0:2d:87:a4:7f:
                    1b:b0:6a:9c:1b:9e:d6:f0:e6:00:09:a4:ae:b7:81:
                    e0:69:dc:78:fb:6d:69:eb:3d:bf:1a:2e:30:73:7a:
                    eb:40:d9:2b:7e:63:a6:28:75:0f:0f:8d:b8:54:a5:
                    a5:95:30:6c:f3:f9:cd:98:24:af:f1:6f:14:c0:8d:
                    65:0f:39:d7:7c:70:da:cc:ee:29:5a:3a:bb:db:49:
                    a2:f3:7b:b6:8f:04:55:99:32:98:35:90:eb:da:e4:
                    9f:75:a9:27:4e:99:2e:39:0c:7c:b2:7d:3e:17:93:
                    65:ff:dc:78:45:44:b9:0a:03:f7:1d:25:a1:18:13:
                    52:3f:a7:43:f9:03:6a:85:94:c7:6b:f9:00:f1:ed:
                    46:ab:e5:9b:ec:6e:fa:e6:d2:09:fe:30:44:75:ba:
                    ad:f1:ba:0a:30:78:2d:e2:7a:01:f0:41:08:78:62:
                    ea:40:11:a9:a8:d6:f3:f2:9f:4e:2b:dd:63:e7:f3:
                    aa:cb:8e:97:b4:38:b1:6f:94:cf:02:42:db:d3:59:
                    5e:b0:39:7c:b7:1d:39:c8:87:c8:05:1b:17:bf:d1:
                    6b:b7:5d:80:6d:3d:c2:57:94:13:0e:69:5e:cd:0e:
                    2e:bd:2c:4f:59:89:83:45:fb:00:59:ea:25:20:57:
                    0d:d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB

            X509v3 Subject Key Identifier: 
                9A:2B:8A:22:D6:8D:0C:C0:2A:A5:6F:64:33:3F:96:60:67:15:1D:B2
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://sectigo.com/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha384WithRSAEncryption
         26:a5:97:13:df:1f:5e:bd:15:68:ee:90:00:b1:dc:93:c7:79:
         a6:b5:b3:86:58:80:10:15:04:62:5b:8a:68:d4:9c:7d:f6:cc:
         d2:9b:29:8f:af:30:ea:d2:cd:4b:87:b1:0b:fa:cc:28:ad:09:
         cd:28:40:29:2d:8a:5c:15:9f:d9:7b:28:d6:3e:df:bb:0f:f4:
         8a:19:d8:e1:14:4f:68:c1:fe:f5:84:d8:b0:58:15:b3:30:76:
         56:13:fd:65:62:92:12:c3:68:1b:72:50:e4:e8:ca:75:1a:40:
         d0:85:15:57:40:be:4e:ea:e5:de:a2:ec:4d:88:aa:40:5d:98:
         fc:40:5c:7b:4a:4d:64:92:e5:de:c1:c6:b8:74:54:53:b3:d3:
         9a:75:e7:3c:01:19:d1:f9:8c:f1:85:31:34:a7:79:b6:ac:19:
         16:2f:7c:e9:34:2b:65:fb:bc:e9:3c:99:b9:f1:e0:9c:f0:ec:
         6d:ee:26:ff:5f:0a:19:28:4f:ed:28:a6:7a:ad:c0:3e:90:12:
         fa:5f:ac:5e:8a:6f:83:c1:5a:93:a0:95:b6:e3:28:aa:54:02:
         36:25:84:30:d7:be:35:7e:a9:bc:96:49:45:96:40:28:39:32:
         53:a6:b3:1d:de:32:0a:d8:32:98:bc:05:e4:66:20:1e:63:c7:
         83:f3:90:15:08:98:02:f8:3a:43:ff:43:9c:dc:ea:6c:3f:99:
         25:8c:6c:c5:da:b5:18:18:bb:ad:2f:56:bd:53:17:76:60:21:
         a4:aa:70:32:9b:67:f6:2e:c0:68:e6:ed:be:66:79:39:63:37:
         c3:e7:13:d2:58:1a:ec:f4:ae:54:b4:4d:86:fb:90:74:8b:28:
         2f:7f:ec:a5:ff:e8:5c:bf:86:8d:df:37:ad:35:76:df:b1:20:
         2b:01:1d:1e:71:d3:64:36:d7:a1:5d:e5:5a:14:4e:eb:21:95:
         17:15:a8:73:1e:7d:9c:48:e2:ce:9f:8b:e3:05:62:91:1c:97:
         38:96:f9:6a:85:fc:f5:8d:a3:eb:73:14:b4:07:16:89:ab:45:
         4d:ad:7d:ec:90:f7:9a:8d:b5:52:b0:f0:23:5d:75:43:87:d2:
         39:aa:37:46:c8:cb:c0:7b:94:d4:c9:47:fb:e7:62:4a:04:de:
         7a:66:2e:66:bf:3e:6e:7d:bb:d4:2c:67:15:e0:5a:e7:c2:5d:
         9c:db:24:88:08:5e:ca:18:80:7e:28:68:46:6e:06:df:b4:de:
         8f:29:71:f0:0b:78:2f:47:0f:72:cc:54:aa:e9:17:70:87:b5:
         3e:dc:09:26:0d:e9:74:ae:17:59:9c:c4:f1:d8:9a:f2:8d:01:
         7f:01:e0:4a:c2:47:eb:51

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06