DigiCertG5CSECCSHA3842021CA1.crt: CN=DigiCert G5 CS ECC SHA384 2021 CA1,O=DigiCert, Inc.,C=US (Intermediate Certificate, Expiring 2036-02-10) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertG5CSECCSHA3842021CA1.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertG5CSECCSHA3842021CA1.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:92:68:18:ad:dd:3c:47:75:8f:0a:ce:93:79:b2:e7
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=DigiCert, Inc., CN=DigiCert CS ECC P384 Root G5
        Validity
            Not Before: Feb 11 00:00:00 2021 GMT
            Not After : Feb 10 23:59:59 2036 GMT
        Subject: C=US, O=DigiCert, Inc., CN=DigiCert G5 CS ECC SHA384 2021 CA1
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:bf:ce:f2:87:e2:c2:cb:bb:fc:f3:7b:7f:fe:bc:
                    7c:9f:44:4e:4e:70:ee:fb:4c:dc:37:30:23:00:95:
                    a7:76:63:f8:da:e7:42:93:a2:81:92:99:78:5f:c0:
                    c5:e9:6c:14:e8:6f:b8:6c:a3:1a:6f:21:4f:76:5b:
                    a0:e1:16:7f:65:83:8a:5c:29:fe:54:1c:b1:22:d2:
                    20:dd:1d:0f:70:d2:1a:45:26:23:00:07:02:ba:d2:
                    79:3e:3b:0b:06:4d:94
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                D7:1D:C7:FA:C6:FA:82:74:20:45:71:34:12:2F:55:D5:98:41:92:5E
            X509v3 Authority Key Identifier: 
                keyid:F0:8C:98:71:39:38:65:C2:3A:1B:A6:17:66:1D:C8:ED:65:DE:92:36

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertCSECCP384RootG5.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertCSECCP384RootG5.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.3
                Policy: 2.23.140.1.4.1

    Signature Algorithm: ecdsa-with-SHA384
         30:64:02:30:72:09:68:a3:44:29:c9:a2:06:5f:f7:85:39:1c:
         6f:f9:4b:84:05:33:11:0e:05:20:32:c4:40:9b:17:18:2b:5c:
         c2:97:87:9a:9a:ee:84:b6:17:e8:53:d8:33:f3:c5:3c:02:30:
         22:2d:84:ad:17:ff:5e:1b:c5:9b:eb:34:d8:8d:49:6c:de:af:
         64:c3:53:24:70:e8:73:48:7e:79:07:82:a6:86:15:05:40:2b:
         24:b9:23:be:e9:ae:fe:77:b2:d2:b4:5d

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIDOTCCAsCgAwIBAgIQDZJoGK3dPEd1jwrOk3my5zAKBggqhkjOPQQDAzBNMQsw
CQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xJTAjBgNVBAMTHERp
Z2lDZXJ0IENTIEVDQyBQMzg0IFJvb3QgRzUwHhcNMjEwMjExMDAwMDAwWhcNMzYw
MjEwMjM1OTU5WjBTMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIElu
Yy4xKzApBgNVBAMTIkRpZ2lDZXJ0IEc1IENTIEVDQyBTSEEzODQgMjAyMSBDQTEw
djAQBgcqhkjOPQIBBgUrgQQAIgNiAAS/zvKH4sLLu/zze3/+vHyfRE5OcO77TNw3
MCMAlad2Y/ja50KTooGSmXhfwMXpbBTob7hsoxpvIU92W6DhFn9lg4pcKf5UHLEi
0iDdHQ9w0hpFJiMABwK60nk+OwsGTZSjggFdMIIBWTASBgNVHRMBAf8ECDAGAQH/
AgEAMB0GA1UdDgQWBBTXHcf6xvqCdCBFcTQSL1XVmEGSXjAfBgNVHSMEGDAWgBTw
jJhxOThlwjobphdmHcjtZd6SNjAOBgNVHQ8BAf8EBAMCAYYwEwYDVR0lBAwwCgYI
KwYBBQUHAwMweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz
cC5kaWdpY2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRpZ2lj
ZXJ0LmNvbS9EaWdpQ2VydENTRUNDUDM4NFJvb3RHNS5jcnQwRQYDVR0fBD4wPDA6
oDigNoY0aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0Q1NFQ0NQMzg0
Um9vdEc1LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATAKBggqhkjO
PQQDAwNnADBkAjByCWijRCnJogZf94U5HG/5S4QFMxEOBSAyxECbFxgrXMKXh5qa
7oS2F+hT2DPzxTwCMCIthK0X/14bxZvrNNiNSWzer2TDUyRw6HNIfnkHgqaGFQVA
KyS5I77prv53stK0XQ==
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06