DigiCertGlobalG2TLSRSASHA2562020CA1.crt: CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is intermediate certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt (DER format)
  • Serial number: 11130109190356876515313367046181502506
  • SHA-1 Fingerprint: 1d7322b41ed99fdd68511bab786c8e26e0831b3b
  • SHA-1 Fingerprint: 1d:73:22:b4:1e:d9:9f:dd:68:51:1b:ab:78:6c:8e:26:e0:83:1b:3b
  • SHA-256 Fingerprint: 1f8eb9e9a8e066cc5b3833e06b3129764b622639d5b163f600e1c79120bf3eed
  • SHA-256 Fingerprint: 1f:8e:b9:e9:a8:e0:66:cc:5b:38:33:e0:6b:31:29:76:4b:62:26:39:d5:b1:63:f6:00:e1:c7:91:20:bf:3e:ed
  • Signature hash algorithm: sha256
  • Subject: CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US
  • Not valid before: 2020-09-24 00:00:00
  • Not valid after: 2030-09-23 23:59:59
  • Issuer:

Download certificate through curl:

curl -sSL http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5f:94:c0:2d:85:7b:e8:cc:14:ff:53:ed:a2:3e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
        Validity
            Not Before: Sep 24 00:00:00 2020 GMT
            Not After : Sep 23 23:59:59 2030 GMT
        Subject: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:10:62:4f:a6:bb:63:6f:ed:90:52:56:c5:
                    6d:27:7b:7a:12:56:8a:f1:f4:f9:d6:e7:e1:8f:bd:
                    95:ab:f2:60:41:15:70:db:12:00:fa:27:0a:b5:57:
                    38:5b:7d:b2:51:93:71:95:0e:6a:41:94:5b:35:1b:
                    fa:7b:fa:bb:c5:be:24:30:fe:56:ef:c4:f3:7d:97:
                    e3:14:f5:14:4d:cb:a7:10:f2:16:ea:ab:22:f0:31:
                    22:11:61:69:90:26:ba:78:d9:97:1f:e3:7d:66:ab:
                    75:44:95:73:c8:ac:ff:ef:5d:0a:8a:59:43:e1:ac:
                    b2:3a:0f:f3:48:fc:d7:6b:37:c1:63:dc:de:46:d6:
                    db:45:fe:7d:23:fd:90:e8:51:07:1e:51:a3:5f:ed:
                    49:46:54:7f:2c:88:c5:f4:13:9c:97:15:3c:03:e8:
                    a1:39:dc:69:0c:32:c1:af:16:57:4c:94:47:42:7c:
                    a2:c8:9c:7d:e6:d4:4d:54:af:42:99:a8:c1:04:c2:
                    77:9c:d6:48:e4:ce:11:e0:2a:80:99:f0:43:70:cf:
                    3f:76:6b:d1:4c:49:ab:24:5e:c2:0d:82:fd:46:a8:
                    ab:6c:93:cc:62:52:42:75:92:f8:9a:fa:5e:5e:b2:
                    b0:61:e5:1f:1f:b9:7f:09:98:e8:3d:fa:83:7f:47:
                    69:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
            X509v3 Authority Key Identifier: 
                keyid:4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
                Policy: 2.23.140.1.2.3

    Signature Algorithm: sha256WithRSAEncryption
         75:8b:c0:3c:5b:ef:ff:70:5c:6b:8a:f5:21:ef:ac:31:e6:43:
         3d:80:af:d7:55:a9:1e:c3:8e:18:6c:79:d3:f7:ac:42:df:8f:
         88:c5:9d:b4:75:f3:c9:08:fd:8a:fe:51:f3:f2:9d:20:1a:04:
         35:ce:f8:b6:41:79:af:ff:cc:96:5e:94:d3:9a:1d:70:2e:a2:
         31:8b:fb:a5:cc:7f:56:df:17:37:97:bf:c1:8d:43:86:ab:8c:
         66:7e:b9:ed:8b:f1:0f:8c:b5:d4:55:af:5c:89:9e:e0:a7:2a:
         6d:b2:a3:63:32:18:3b:cb:de:b5:9f:83:b3:11:01:ac:20:0d:
         90:97:12:b7:29:9c:35:b5:d7:91:0e:ef:40:6f:6d:5c:3b:bd:
         a1:d9:fb:e2:cb:2e:76:40:d2:3a:bb:2c:bf:16:0b:ea:bd:03:
         5b:4e:98:3a:2a:ed:05:50:07:15:93:3c:73:39:91:94:5a:48:
         0e:c6:d3:4a:01:af:66:39:b9:bd:42:34:1c:db:08:03:f3:40:
         fc:12:e8:ae:3c:ab:8a:d5:fb:72:79:64:a6:e3:0e:55:b1:3b:
         95:3f:ad:60:33:67:8a:ac:b6:a7:5c:f0:ed:5a:52:1b:d4:61:
         e1:25:12:e6:07:b5:aa:94:b2:f0:28:f6:61:26:5e:55:1c:f8:
         01:eb:77:71

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26