DigiCertSecureSiteECCCNCAG3.crt: CN=DigiCert Secure Site ECC CN CA G3,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.digicert.cn/DigiCertSecureSiteECCCNCAG3.crt (DER format)
  • Serial number: 7898998664477365405465908475499409701
  • SHA-1 Fingerprint: 06ef8d71c4ba5153352b6e37e72de35669b94f9e
  • SHA-1 Fingerprint: 06:ef:8d:71:c4:ba:51:53:35:2b:6e:37:e7:2d:e3:56:69:b9:4f:9e
  • SHA-256 Fingerprint: 00c0cba95cbfe1e270814275f32b505d6e5916c2b6da67faf4dd309ee6e86cbe
  • SHA-256 Fingerprint: 00:c0:cb:a9:5c:bf:e1:e2:70:81:42:75:f3:2b:50:5d:6e:59:16:c2:b6:da:67:fa:f4:dd:30:9e:e6:e8:6c:be
  • Signature hash algorithm: sha256
  • Subject: CN=DigiCert Secure Site ECC CN CA G3,O=DigiCert Inc,C=US
  • Not valid before: 2020-03-13 12:14:19
  • Not valid after: 2030-03-13 12:14:19
  • Issuer:
    • Issuer name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.digicert.cn/DigiCertSecureSiteECCCNCAG3.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.digicert.cn/DigiCertSecureSiteECCCNCAG3.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f1:4a:b3:c9:ed:ef:44:a9:cf:b1:18:b4:50:71:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Mar 13 12:14:19 2020 GMT
            Not After : Mar 13 12:14:19 2030 GMT
        Subject: C=US, O=DigiCert Inc, CN=DigiCert Secure Site ECC CN CA G3
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:19:ae:ea:0a:a7:ad:c8:f4:c5:68:7c:25:49:17:
                    4a:ea:a2:d5:c6:bd:c6:25:91:d6:ed:50:1f:45:4b:
                    50:be:52:2d:84:9f:38:3f:b5:cd:66:66:7c:60:55:
                    7b:5e:bb:d7:d3:84:43:13:72:e8:ca:fa:59:54:33:
                    e8:5d:74:7e:30
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1A:B5:68:8C:6C:09:51:F7:47:01:3B:E1:93:ED:E5:00:16:CF:BB:95
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.cn

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         0a:a8:b5:64:56:7f:3c:e3:46:82:18:30:d5:d1:c4:5c:68:d1:
         88:13:33:4e:fa:b3:f9:e3:f8:14:40:3a:07:f4:e9:e5:90:08:
         e5:6e:f3:db:d5:e0:9f:9d:d8:47:6d:99:ab:c3:f4:f8:0f:33:
         67:5a:94:27:bb:93:54:d4:63:0f:4d:40:3f:c4:ea:20:96:6c:
         49:a0:45:10:bc:31:61:f6:ee:2e:dd:de:a5:96:95:c4:aa:37:
         46:b5:3c:d1:f1:19:d7:ce:55:fe:7b:6a:8e:3f:33:44:f9:85:
         67:50:9e:35:1e:80:a0:43:ad:ad:37:ab:fe:0b:b4:fd:a5:4d:
         30:f6:29:83:e9:66:6b:25:b8:d2:a9:09:d4:1c:47:b2:15:aa:
         0d:97:41:30:09:75:1a:ae:8b:2c:58:db:79:d9:1f:26:ef:84:
         12:66:6d:e4:8b:25:cd:04:31:46:c6:d8:14:51:b8:46:d2:5b:
         62:ee:d4:81:0b:9e:1a:7c:dc:4a:80:1c:41:2d:fb:0e:50:f4:
         1d:ec:29:6a:9b:76:53:d3:36:f4:ed:c8:d3:22:4e:b1:c3:3b:
         69:e1:37:87:f6:04:2c:81:e6:3e:5f:c2:b5:93:90:a0:3c:c2:
         a4:33:01:7c:a4:86:04:43:55:19:5f:81:00:d7:67:ca:15:23:
         2f:ca:3f:62

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIDrzCCApegAwIBAgIQBfFKs8nt70Spz7EYtFBxJTANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
QTAeFw0yMDAzMTMxMjE0MTlaFw0zMDAzMTMxMjE0MTlaMFAxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxKjAoBgNVBAMTIURpZ2lDZXJ0IFNlY3Vy
ZSBTaXRlIEVDQyBDTiBDQSBHMzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBmu
6gqnrcj0xWh8JUkXSuqi1ca9xiWR1u1QH0VLUL5SLYSfOD+1zWZmfGBVe16719OE
QxNy6Mr6WVQz6F10fjCjggE9MIIBOTAdBgNVHQ4EFgQUGrVojGwJUfdHATvhk+3l
ABbPu5UwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDgYDVR0PAQH/
BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8E
CDAGAQH/AgEAMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAYYXaHR0cDovL29j
c3AuZGlnaWNlcnQuY24wQAYDVR0fBDkwNzA1oDOgMYYvaHR0cDovL2NybC5kaWdp
Y2VydC5jbi9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwPQYDVR0gBDYwNDAyBgRV
HSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw
DQYJKoZIhvcNAQELBQADggEBAAqotWRWfzzjRoIYMNXRxFxo0YgTM076s/nj+BRA
Ogf06eWQCOVu89vV4J+d2EdtmavD9PgPM2dalCe7k1TUYw9NQD/E6iCWbEmgRRC8
MWH27i7d3qWWlcSqN0a1PNHxGdfOVf57ao4/M0T5hWdQnjUegKBDra03q/4LtP2l
TTD2KYPpZmsluNKpCdQcR7IVqg2XQTAJdRquiyxY23nZHybvhBJmbeSLJc0EMUbG
2BRRuEbSW2Lu1IELnhp83EqAHEEt+w5Q9B3sKWqbdlPTNvTtyNMiTrHDO2nhN4f2
BCyB5j5fwrWTkKA8wqQzAXykhgRDVRlfgQDXZ8oVIy/KP2I=
-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26