ecert_ca_2-19_pem.crt: CN=Hongkong Post e-Cert CA 2 - 19,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK (Intermediate Certificate, Expiring 2034-07-29) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://www1.ecert.gov.hk/root/ecert_ca_2-19_pem.crt" --output cert.crt

Download certificate through wget:

wget -q "http://www1.ecert.gov.hk/root/ecert_ca_2-19_pem.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:59:52:fb:49:c0:70:13:85:88:43:ed:76:51:96:f8:89:7a:58:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 2
        Validity
            Not Before: Jul 29 08:06:44 2019 GMT
            Not After : Jul 29 08:06:44 2034 GMT
        Subject: C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post e-Cert CA 2 - 19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:a3:1d:42:27:fc:92:14:a9:9c:3b:51:e4:
                    3f:d3:43:08:72:c1:51:25:3a:ef:0c:16:50:d1:2a:
                    6a:49:d7:fe:e6:22:8d:ff:6d:58:2f:72:02:f9:75:
                    2a:44:6b:16:56:bc:70:39:c3:f0:8a:12:64:d8:99:
                    ae:41:8d:02:eb:fc:fb:a6:59:5e:b7:26:cd:35:1f:
                    d4:c9:da:a0:df:97:c3:4c:4c:ba:01:15:39:94:eb:
                    38:68:09:af:58:d3:43:fc:97:f4:a2:46:21:bd:50:
                    eb:3c:3b:e3:04:33:b6:a3:33:3a:8b:ec:77:14:2c:
                    3c:2b:58:a2:33:9f:b5:f2:f6:13:15:8d:4f:2d:a1:
                    aa:40:23:17:c6:fa:89:85:44:74:fb:b6:56:27:ef:
                    7b:7c:ef:98:27:14:d0:30:4c:69:ad:da:ed:b0:aa:
                    69:70:b0:b1:56:e3:fb:4b:ee:9c:f3:95:b9:3d:ef:
                    6a:f6:f4:c1:6d:4f:22:fa:f0:43:cf:17:36:60:2b:
                    2d:70:71:2d:73:5f:7f:9f:6c:4a:27:45:ba:7e:e6:
                    78:9f:af:59:dd:71:5f:9c:cf:42:94:19:d8:1b:aa:
                    11:f0:7b:43:a7:2f:b7:17:d0:3f:8c:d5:77:0d:ff:
                    9d:40:02:19:60:89:8c:73:f0:e7:70:78:a5:bc:62:
                    36:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                CA Issuers - URI:http://www1.eCert.gov.hk/root/root_ca_2.crt
                OCSP - URI:http://ocsp1.eCert.gov.hk

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: www.eCert.gov.hk

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Authority Key Identifier: 
                keyid:61:B5:E0:42:DE:B6:AF:A7:20:EA:F6:24:C8:A7:9D:85:A0:58:53:D8

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl1.eCert.gov.hk/crl/RootCA2ARL.crl

            X509v3 Subject Key Identifier: 
                55:43:D2:CF:E5:5B:2E:CE:35:73:07:0A:F5:01:C9:F2:5F:E5:33:0B
    Signature Algorithm: sha256WithRSAEncryption
         1b:53:d4:17:04:91:3e:4b:98:0e:ac:2d:2e:ff:e2:af:dd:36:
         69:9d:f5:3f:e0:d0:2d:12:ac:e2:d3:b9:12:ae:1e:fc:56:f4:
         d8:f9:ce:62:e7:67:f6:04:d0:6d:c7:ba:5c:cb:51:ab:e8:3c:
         c8:81:eb:de:8e:4d:47:b5:63:b4:22:4c:71:f2:30:db:3d:03:
         62:15:e0:64:70:b8:4e:90:ac:7f:96:95:9d:22:0d:7b:8c:7a:
         c9:07:4d:6a:b5:02:c7:f7:a4:a3:81:a8:55:00:90:46:a9:d3:
         2b:59:72:b1:a3:9d:d8:19:33:6e:7a:c0:d3:04:a7:54:52:1b:
         65:33:ff:f3:0e:d5:ff:8d:ec:41:70:4a:79:47:62:20:33:32:
         ca:4b:89:7b:d1:81:ce:73:2f:97:5a:d1:b8:12:50:33:3d:0d:
         e5:ef:da:b8:c8:06:76:55:67:a8:df:a3:b4:86:78:99:3f:57:
         ad:fe:b4:fa:37:3a:1f:27:08:6d:78:98:8a:6d:8c:88:5a:c9:
         cc:0f:84:70:0e:0a:55:7f:36:1c:ad:d7:7c:84:2c:49:f9:9f:
         5f:29:a1:b6:d8:37:20:e1:82:36:4e:4e:da:66:1f:12:04:71:
         0c:53:00:45:c5:f0:38:54:e0:f2:b4:a2:61:ad:90:cf:78:9b:
         0c:86:c5:58:74:47:d1:6e:64:0b:06:c3:95:7f:d3:f6:e8:2c:
         fe:89:2d:f1:59:c2:50:06:50:92:86:92:58:21:4b:6c:a1:fa:
         8e:d8:f9:91:b0:31:fe:6b:1e:4e:7e:2c:33:b3:9f:f7:90:b4:
         97:7b:d0:d4:21:53:e2:ed:1f:5b:24:b0:64:36:66:ad:88:db:
         aa:e3:1b:d9:0e:c2:55:48:da:50:cd:1b:e7:74:cf:a1:61:0e:
         b2:7c:c7:15:f1:a0:cf:e0:80:6b:2d:05:08:8f:fb:13:05:8e:
         f1:61:6a:44:ca:f6:0f:75:17:71:17:91:b2:99:7d:56:45:ab:
         be:a2:e9:09:54:2a:c1:fa:d8:86:36:35:b5:32:18:e5:a0:a1:
         77:0d:3c:06:00:b7:f6:ee:10:f2:4d:1d:83:4a:ba:38:21:11:
         1b:f9:5e:cf:56:f4:0a:5a:be:04:b0:14:c6:44:ea:c7:30:d0:
         7f:7b:55:3e:5c:8b:5c:f8:1d:2a:dc:0d:1b:c6:9b:17:5b:c7:
         9e:b1:6e:17:8b:3d:01:f2:23:1e:e5:71:ba:97:4b:ae:f2:9b:
         1e:15:da:47:b4:22:79:9d:35:d2:d8:44:b6:d5:8d:b1:ce:17:
         93:d0:31:77:e6:60:93:39:f8:a1:bb:a1:5b:d8:d9:a6:90:93:
         cb:97:16:5f:c2:be:7e:82

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06