cloudsslsha2g3.crt: CN=GlobalSign CloudSSL CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE (Intermediate Certificate, Expiring 2025-08-19) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://secure.globalsign.com/cacert/cloudsslsha2g3.crt" --output cert.crt

Download certificate through wget:

wget -q "http://secure.globalsign.com/cacert/cloudsslsha2g3.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ca:81:7a:c6:dc:7f:56:b6:80:bb:43:36:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
        Validity
            Not Before: Oct 14 00:00:00 2016 GMT
            Not After : Aug 19 00:00:00 2025 GMT
        Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CloudSSL CA - SHA256 - G3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:75:e1:32:98:e5:d9:ae:84:7c:8d:e8:23:
                    5f:46:95:5b:4c:a2:25:70:d7:90:04:85:80:c9:b5:
                    f4:8a:65:4d:92:cb:a5:c4:42:a0:b6:79:25:31:ed:
                    f1:85:20:cd:13:51:3d:67:ac:97:4d:68:9b:33:86:
                    5c:b3:7b:2d:aa:df:77:a0:61:d1:f5:3c:fb:9a:fc:
                    d3:d5:94:ca:c9:1e:80:1b:90:90:c8:ac:8d:f6:60:
                    17:9c:31:b8:c5:61:a2:e2:6e:57:25:08:6f:24:99:
                    99:cf:94:bf:c7:8b:6b:b0:1f:ca:14:fa:18:9b:6c:
                    10:7c:99:2b:da:4a:63:e5:b2:4e:c2:fd:3e:10:0b:
                    48:f4:77:0b:2f:f0:96:4b:3a:ee:bd:35:de:85:8d:
                    da:13:0e:ce:01:c4:71:d3:d3:77:c5:08:a6:60:39:
                    25:a7:27:69:5c:83:d1:6f:76:78:ee:c5:44:5b:45:
                    bd:29:3b:e2:c6:09:0f:a2:be:2b:dc:e3:5c:da:5a:
                    6f:8e:e7:c9:07:6b:7e:a1:c0:53:95:82:89:e0:78:
                    5c:72:a8:6c:be:67:6b:ab:e7:33:d9:87:f2:f8:5c:
                    27:f4:f6:2a:3b:87:ef:da:c2:47:da:bf:ac:eb:27:
                    64:7b:4c:53:eb:34:e1:2f:9b:20:4d:54:12:6b:7d:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                A9:2B:87:E1:CE:24:47:3B:1B:BF:CF:85:37:02:55:9D:0D:94:58:E6
            X509v3 Authority Key Identifier: 
                keyid:8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC

            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/rootr3

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.com/root-r3.crl

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                Policy: 2.23.140.1.2.2
                  CPS: https://www.globalsign.com/repository/

    Signature Algorithm: sha256WithRSAEncryption
         47:c1:42:ff:7c:f2:82:0e:73:8d:52:41:d9:61:5d:36:96:ee:
         16:9a:4f:32:eb:ca:9c:6f:8c:22:97:73:e9:b9:57:0a:7a:2f:
         36:d9:4e:ba:98:c5:fe:5a:26:46:ce:2a:d7:ad:08:eb:fd:1f:
         82:46:00:69:1f:6a:5b:b0:b4:8e:73:40:2d:bc:24:c5:71:1c:
         6f:d7:b5:40:f1:68:84:fb:00:2c:86:96:86:ba:6d:e8:24:5a:
         2e:7d:a5:ab:e4:8c:8e:19:49:49:aa:d5:4a:aa:60:89:b1:dd:
         85:fe:8c:67:70:b5:d4:74:41:ca:29:bc:ac:ed:a3:b6:30:72:
         ee:e6:ed:28:18:98:94:33:ad:16:68:65:ea:4a:cc:6d:ae:05:
         44:72:6b:d5:aa:0b:17:e0:53:9d:cd:fe:c5:d5:33:52:fb:a7:
         c4:a8:2c:44:83:b4:09:c5:6e:0f:9f:12:a4:27:0b:31:43:3e:
         8a:33:a0:4b:4d:88:ce:46:17:c5:bf:9b:1d:29:57:2e:89:50:
         f9:35:08:8b:5c:fb:41:27:4d:d3:e8:25:05:fa:9e:ae:30:22:
         ba:e0:15:89:57:19:e1:b1:b8:2d:15:36:84:dd:22:20:08:2c:
         0d:cb:ba:57:c1:86:12:83:53:31:a3:d8:12:5f:8d:19:a5:fd:
         00:83:50:1d

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06