evoca.cer: CN=CFCA EV OCA,O=China Financial Certification Authority,C=CN (Intermediate Certificate, Expiring 2029-12-29) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://gtc.cfca.com.cn/evoca/evoca.cer" --output cert.crt

Download certificate through wget:

wget -q "http://gtc.cfca.com.cn/evoca/evoca.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776576709222 (0xb4cf943266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CN, O=China Financial Certification Authority, CN=CFCA EV ROOT
        Validity
            Not Before: Aug  8 06:06:31 2012 GMT
            Not After : Dec 29 06:06:31 2029 GMT
        Subject: C=CN, O=China Financial Certification Authority, CN=CFCA EV OCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:8c:b0:61:71:15:02:0f:30:a5:4f:a1:16:
                    8e:f6:b1:cd:5f:8d:71:6e:af:23:86:76:dd:2b:43:
                    03:55:bc:5f:19:ad:db:f1:04:ca:c4:c7:26:c6:54:
                    65:50:b7:ec:6a:27:b4:70:89:5a:46:5d:00:51:c2:
                    4f:40:7f:5f:b5:e9:33:87:84:f6:f3:bc:6a:b0:40:
                    32:75:84:07:7f:be:da:ad:64:39:9d:8d:df:47:d4:
                    5c:a0:1a:bd:a5:30:90:6e:ac:38:f5:2e:bf:8c:70:
                    39:a0:f4:1a:12:82:9b:17:41:bc:cd:f5:4a:a7:93:
                    eb:70:a4:ae:7c:73:10:c8:aa:3f:13:3d:94:61:3f:
                    a0:ba:dd:fa:8f:81:98:a4:00:01:b9:5e:8f:6e:eb:
                    0f:a6:3b:9f:b0:df:41:af:df:b1:aa:0c:b3:f2:e6:
                    d2:a7:55:a5:d6:a4:a5:bd:05:10:06:10:09:00:7f:
                    9a:dc:d3:21:0f:48:a5:95:a1:9f:4d:d5:9b:17:8f:
                    39:6b:93:62:94:c1:46:a8:90:5a:fe:42:d5:11:8c:
                    06:e1:aa:0a:75:5f:6f:1b:f3:45:4b:42:ca:cf:74:
                    15:9c:1e:db:92:b2:e3:4e:4b:86:37:fc:d0:24:fd:
                    1d:68:9d:c2:18:0c:e6:37:e0:ab:da:e8:ed:5c:e7:
                    c0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.cfca.com.cn/ocsp

            X509v3 Authority Key Identifier: 
                keyid:E3:FE:2D:FD:28:D0:0B:B5:BA:B6:A2:C4:BF:06:AA:05:8C:93:FB:2F

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.cfca.com.cn/us/us-12.htm

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.cfca.com.cn/evrca/RSA/crl1.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                55:08:E2:DC:CC:95:6D:1F:5D:DE:B3:47:E8:E9:16:C6:C0:45:77:C4
    Signature Algorithm: sha256WithRSAEncryption
         c9:85:10:8a:02:13:d5:0d:99:bd:81:61:88:53:45:5d:76:90:
         d5:6e:70:fe:ad:eb:cd:c1:68:54:e0:26:2c:c8:27:0f:de:6e:
         fb:d3:75:63:53:c9:cc:8f:e4:c4:05:94:72:ab:21:8c:23:bc:
         53:bd:45:fc:3c:fb:22:2c:b1:3d:c9:15:88:aa:b0:b0:6c:c2:
         f6:8c:af:70:08:b8:0d:a6:4e:79:9a:b2:f6:45:7b:a3:f5:f6:
         a8:ad:cd:34:64:cf:e4:cb:e9:31:5a:8a:5a:ed:9f:3b:9d:b2:
         f9:f6:49:e5:5b:46:25:fe:e8:2b:32:34:d3:28:3e:c4:47:4d:
         e6:40:12:99:01:ec:9d:ef:87:e6:40:8a:fd:e0:b0:85:ed:8e:
         dc:f9:63:58:96:59:16:62:a5:e9:89:fe:a1:1f:5b:68:43:38:
         d0:7e:4f:a9:46:70:45:c7:0e:2f:5d:22:45:9c:0b:f8:c5:4f:
         85:cf:33:ae:29:6a:00:33:f6:01:06:66:0d:4f:cc:50:44:f1:
         03:31:8b:06:83:00:e7:9a:1b:49:74:7b:f1:d6:e3:02:65:a3:
         86:73:38:42:ea:64:62:4b:95:88:50:f0:09:01:61:1f:79:34:
         4b:51:f6:3e:5b:58:af:7c:2f:39:f2:92:57:64:d8:c0:cb:04:
         3d:a6:ac:87:cc:91:58:cc:c0:48:f8:03:c1:25:31:7b:0b:9d:
         65:d7:83:8d:4d:37:a8:23:52:6d:bf:22:e7:4a:39:a1:aa:9e:
         23:ec:e5:26:6b:37:7e:8e:e0:1d:cd:ce:c6:99:74:bc:e7:1c:
         7e:47:d3:e6:a4:b2:ea:e3:82:67:bc:44:01:b4:03:63:80:9d:
         11:b7:55:70:56:af:1b:9d:ee:dd:0a:0c:83:4b:b3:e9:b1:63:
         b2:11:fb:15:59:d9:cc:3a:09:ea:fc:1e:70:15:7c:a3:c9:ad:
         b7:6a:ee:fc:89:26:42:29:0a:59:7e:98:b1:da:1a:0b:ef:dc:
         8a:a2:53:8a:eb:ae:59:44:dc:d6:23:28:6e:05:93:63:22:62:
         f6:60:d7:42:97:03:cb:65:62:c2:ed:f0:8f:d1:70:d9:82:d9:
         3b:e3:64:76:15:13:7b:5a:9d:b1:b0:e7:74:d1:18:59:36:56:
         ae:bc:5c:e9:2f:a2:83:9a:ad:d8:a1:c1:19:20:a9:c3:a0:52:
         fa:2e:39:1b:af:4a:a4:e5:91:08:b3:4c:51:fa:15:35:2d:df:
         1b:ae:10:3e:1d:9e:7e:4d:ff:58:a3:70:3b:74:37:79:79:a2:
         fa:32:1c:e5:5c:62:23:b8:76:b0:8d:f7:a2:c7:89:4a:22:49:
         f6:0e:0e:6a:57:1b:6b:65

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIFTjCCAzagAwIBAgIGALTPlDJmMA0GCSqGSIb3DQEBCwUAMFYxCzAJBgNVBAYT
AkNOMTAwLgYDVQQKDCdDaGluYSBGaW5hbmNpYWwgQ2VydGlmaWNhdGlvbiBBdXRo
b3JpdHkxFTATBgNVBAMMDENGQ0EgRVYgUk9PVDAeFw0xMjA4MDgwNjA2MzFaFw0y
OTEyMjkwNjA2MzFaMFUxCzAJBgNVBAYTAkNOMTAwLgYDVQQKDCdDaGluYSBGaW5h
bmNpYWwgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxFDASBgNVBAMMC0NGQ0EgRVYg
T0NBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02OMsGFxFQIPMKVP
oRaO9rHNX41xbq8jhnbdK0MDVbxfGa3b8QTKxMcmxlRlULfsaie0cIlaRl0AUcJP
QH9ftekzh4T287xqsEAydYQHf77arWQ5nY3fR9RcoBq9pTCQbqw49S6/jHA5oPQa
EoKbF0G8zfVKp5PrcKSufHMQyKo/Ez2UYT+gut36j4GYpAABuV6PbusPpjufsN9B
r9+xqgyz8ubSp1Wl1qSlvQUQBhAJAH+a3NMhD0illaGfTdWbF485a5NilMFGqJBa
/kLVEYwG4aoKdV9vG/NFS0LKz3QVnB7bkrLjTkuGN/zQJP0daJ3CGAzmN+Cr2ujt
XOfAYwIDAQABo4IBITCCAR0wOAYIKwYBBQUHAQEELDAqMCgGCCsGAQUFBzABhhxo
dHRwOi8vb2NzcC5jZmNhLmNvbS5jbi9vY3NwMB8GA1UdIwQYMBaAFOP+Lf0o0Au1
uraixL8GqgWMk/svMA8GA1UdEwEB/wQFMAMBAf8wRAYDVR0gBD0wOzA5BgRVHSAA
MDEwLwYIKwYBBQUHAgEWI2h0dHA6Ly93d3cuY2ZjYS5jb20uY24vdXMvdXMtMTIu
aHRtMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwuY2ZjYS5jb20uY24vZXZy
Y2EvUlNBL2NybDEuY3JsMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUVQji3MyV
bR9d3rNH6OkWxsBFd8QwDQYJKoZIhvcNAQELBQADggIBAMmFEIoCE9UNmb2BYYhT
RV12kNVucP6t683BaFTgJizIJw/ebvvTdWNTycyP5MQFlHKrIYwjvFO9Rfw8+yIs
sT3JFYiqsLBswvaMr3AIuA2mTnmasvZFe6P19qitzTRkz+TL6TFailrtnzudsvn2
SeVbRiX+6CsyNNMoPsRHTeZAEpkB7J3vh+ZAiv3gsIXtjtz5Y1iWWRZipemJ/qEf
W2hDONB+T6lGcEXHDi9dIkWcC/jFT4XPM64pagAz9gEGZg1PzFBE8QMxiwaDAOea
G0l0e/HW4wJlo4ZzOELqZGJLlYhQ8AkBYR95NEtR9j5bWK98Lznykldk2MDLBD2m
rIfMkVjMwEj4A8ElMXsLnWXXg41NN6gjUm2/IudKOaGqniPs5SZrN36O4B3NzsaZ
dLznHH5H0+aksurjgme8RAG0A2OAnRG3VXBWrxud7t0KDINLs+mxY7IR+xVZ2cw6
Cer8HnAVfKPJrbdq7vyJJkIpCll+mLHaGgvv3IqiU4rrrllE3NYjKG4Fk2MiYvZg
10KXA8tlYsLt8I/RcNmC2TvjZHYVE3tanbGw53TRGFk2Vq68XOkvooOardihwRkg
qcOgUvouORuvSqTlkQizTFH6FTUt3xuuED4dnn5N/1ijcDt0N3l5ovoyHOVcYiO4
drCN96LHiUoiSfYODmpXG2tl
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06