gtsr3.der: CN=GTS Root R3,O=Google Trust Services LLC,C=US (Root Certificate, Expiring 2036-06-22) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Certificate Download URL: https://pki.goog/repo/certs/gtsr3.der (in DER format )
Serial Number : 159662495401136852707857743206
SHA-1 Fingerprint : ede571802bc892b95b833cd232683f09cda01e46
SHA-1 Fingerprint : ed:e5:71:80:2b:c8:92:b9:5b:83:3c:d2:32:68:3f:09:cd:a0:1e:46
SHA-256 Fingerprint : 34d8a73ee208d9bcdb0d956520934b4e40e69482596e8b6f73c8426b010a6f48
SHA-256 Fingerprint : 34:d8:a7:3e:e2:08:d9:bc:db:0d:95:65:20:93:4b:4e:40:e6:94:82:59:6e:8b:6f:73:c8:42:6b:01:0a:6f:48
Signature Hash Algorithm : sha384
Subject : CN=GTS Root R3,O=Google Trust Services LLC,C=US
- Country Name: US (United States of America)
- Organization: Google Trust Services LLC
- Common Name: GTS Root R3
Not Valid Before: 2016-06-22 00:00:00
Not Valid After: 2036-06-22 00:00:00
Issuer (Parent Certificate):
- Issuer Name: CN=GTS Root R3,O=Google Trust Services LLC,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Root Certificate
- Certificate Policy (CP) URL: https://pki.goog/repo/cp/3.4/GTS-CP.pdf
- Certificate Practice Statement (CPS) URL: https://pki.goog/repo/cps/4.13/GTS-CPS.pdf
- Auditor: Ernst & Young, LLP
- Standard Audit URL: https://www.cpacanada.ca//GenericHandlers/CPACHandler.ashx?AttachmentID=4525b841-06ec-4ec8-9cae-ad27ee4e19a9
- Standard Audit Period Start Date: 2021.10.01
- Standard Audit Period End Date: 2022.09.30
- Standard Audit Statement Date: 2022.10.31
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://crl.pki.goog/gtsr3/gtsr3.crl

Download certificate through curl:

curl -sSL "https://pki.goog/repo/certs/gtsr3.der" --output cert.crt

Download certificate through wget:

wget -q "https://pki.goog/repo/certs/gtsr3.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:03:e5:b8:82:eb:20:f8:25:27:6d:3d:66
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS Root R3
        Validity
            Not Before: Jun 22 00:00:00 2016 GMT
            Not After : Jun 22 00:00:00 2036 GMT
        Subject: C=US, O=Google Trust Services LLC, CN=GTS Root R3
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:1f:4f:33:87:33:29:8a:a1:84:de:cb:c7:21:58:
                    41:89:ea:56:9d:2b:4b:85:c6:1d:4c:27:bc:7f:26:
                    51:72:6f:e2:9f:d6:a3:ca:cc:45:14:46:8b:ad:ef:
                    7e:86:8c:ec:b1:7e:2f:ff:a9:71:9d:18:84:45:04:
                    41:55:6e:2b:ea:26:7f:bb:90:01:e3:4b:19:ba:e4:
                    54:96:45:09:b1:d5:6c:91:44:ad:84:13:8e:9a:8c:
                    0d:80:0c:32:f6:e0:27
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                C1:F1:26:BA:A0:2D:AE:85:81:CF:D3:F1:2A:12:BD:B8:0A:67:FD:BC
    Signature Algorithm: ecdsa-with-SHA384
         30:66:02:31:00:f6:e1:20:95:14:7b:54:a3:90:16:11:bf:84:
         c8:ea:6f:6b:17:9e:1e:46:98:20:9b:9f:d3:0d:d9:ac:d3:2f:
         cd:7c:f8:5b:2e:55:bb:bf:dd:92:f7:a4:0c:dc:31:e1:a2:02:
         31:00:fc:97:66:66:e5:43:16:13:83:dd:c7:df:2f:be:14:38:
         ed:01:ce:b1:17:1a:11:75:e9:bd:03:8f:26:7e:84:e5:c9:60:
         a6:95:d7:54:59:b7:e7:11:2c:89:d4:b9:ee:17

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates