apevsecc1g1.der: CN=Apple Public EV Server ECC CA 1 - G1,O=Apple Inc.,C=US (Intermediate Certificate, Expiring 2030-04-10) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: http://certs.apple.com/apevsecc1g1.der (in DER format )
Serial Number : 16842083344538996361179333927479884023
SHA-1 Fingerprint : 222902acfb934c606d45bdc31c603daaf8b13e4f
SHA-1 Fingerprint : 22:29:02:ac:fb:93:4c:60:6d:45:bd:c3:1c:60:3d:aa:f8:b1:3e:4f
SHA-256 Fingerprint : 2585928d2c5bfd952e025bd12e27c6776224cf752ec362d3031cdd49351844d4
SHA-256 Fingerprint : 25:85:92:8d:2c:5b:fd:95:2e:02:5b:d1:2e:27:c6:77:62:24:cf:75:2e:c3:62:d3:03:1c:dd:49:35:18:44:d4
Signature Hash Algorithm : sha384
Subject : CN=Apple Public EV Server ECC CA 1 - G1,O=Apple Inc.,C=US
- Country Name: US (United States of America)
- Organization: Apple Inc.
- Common Name: Apple Public EV Server ECC CA 1 - G1
Not Valid Before: 2020-04-29 12:34:52
Not Valid After: 2030-04-10 23:59:59
Issuer (Parent Certificate):
- Issuer Name: CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: https://images.apple.com/certificateauthority/pdf/Apple_Certificate_Policy_v4.0.pdf
- Certificate Practice Statement (CPS) URL: https://images.apple.com/certificateauthority/pdf/Apple_Public_CA_CPS_v5.11.pdf
- Auditor: Ernst & Young, LLP
- Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=15b92005-0ad5-4bc7-a9f1-3f2b27097bf0
- Standard Audit Period Start Date: 2021.04.16
- Standard Audit Period End Date: 2022.04.15
- Standard Audit Statement Date: 2022.07.09
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://crl.apple.com/apevsecc1g1.crl
- Check its issuer’s audit information: CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US .

Download certificate through curl:

curl -sSL "http://certs.apple.com/apevsecc1g1.der" --output cert.crt

Download certificate through wget:

wget -q "http://certs.apple.com/apevsecc1g1.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ab:aa:d1:ce:c4:e9:7c:c2:66:58:81:d0:21:38:f7
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
        Validity
            Not Before: Apr 29 12:34:52 2020 GMT
            Not After : Apr 10 23:59:59 2030 GMT
        Subject: C=US, O=Apple Inc., CN=Apple Public EV Server ECC CA 1 - G1
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:29:f8:e1:5a:b9:87:44:04:98:ff:16:90:86:f9:
                    e0:e1:42:65:5f:86:fd:03:18:fc:c6:cf:8d:13:5b:
                    c0:5e:5b:18:a9:61:33:9a:e0:52:e2:78:06:28:53:
                    ed:ed:da:d8:3d:15:92:ad:03:80:43:4c:ee:37:62:
                    9a:cb:66:6e:b3
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E0:85:48:7D:13:A6:D3:10:19:9F:5C:CB:6B:78:24:92:F8:AE:1B:AE
            X509v3 Authority Key Identifier: 
                keyid:B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.2.1
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua
                Policy: 2.23.140.1.1

    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:31:00:c8:72:c0:4f:fe:22:06:ec:62:e3:f3:47:85:
         97:5e:e0:f6:4e:f0:29:c6:db:f0:37:a0:63:b4:36:c8:e9:a1:
         ed:92:57:de:07:af:e2:69:60:7a:c1:cd:3f:21:c9:e2:92:02:
         30:67:45:7c:91:69:cf:6c:33:c2:8d:15:d8:37:fb:b2:d6:22:
         25:bd:b1:48:ed:24:2e:a4:1a:64:72:1a:6e:af:57:8a:00:84:
         40:dd:f6:37:64:e2:af:bb:6f:9c:e5:89:de

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates