appleistca8g1_bc.cer: C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple IST CA 8 - G1

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://certs.apple.com/appleistca8g1_bc.cer (DER format)
  • Serial number: 13670455340762890388728203980962011364
  • SHA-1 Fingerprint: 43673e88aff8a34b839211f4c8193397e64cb306
  • SHA-1 Fingerprint: 43:67:3e:88:af:f8:a3:4b:83:92:11:f4:c8:19:33:97:e6:4c:b3:06
  • SHA-256 Fingerprint: 5c29dbea9b7cc8b02418f28c1c8736dfdf170665d098ef681d903be76987d249
  • SHA-256 Fingerprint: 5c:29:db:ea:9b:7c:c8:b0:24:18:f2:8c:1c:87:36:df:df:17:06:65:d0:98:ef:68:1d:90:3b:e7:69:87:d2:49
  • Signature hash algorithm: sha256
  • Subject: C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple IST CA 8 - G1
  • Not valid before: 2018-12-12 12:00:00
  • Not valid after: 2025-05-07 12:00:00
  • Issuer:
    • Issuer name: CN=Baltimore CyberTrust Root,OU=CyberTrust,O=Baltimore,C=IE
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://certs.apple.com/appleistca8g1_bc.cer --output cert.crt

Download certificate through wget:

wget -q http://certs.apple.com/appleistca8g1_bc.cer --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:48:d5:7c:65:fb:0e:6c:f7:04:a3:64:5f:14:18:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
        Validity
            Not Before: Dec 12 12:00:00 2018 GMT
            Not After : May  7 12:00:00 2025 GMT
        Subject: CN=Apple IST CA 8 - G1, OU=Certification Authority, O=Apple Inc., C=US
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:2d:54:8e:68:b0:10:13:ef:f4:2d:db:d8:09:b2:
                    43:e8:9d:65:99:6e:34:b8:d4:97:c9:8e:c9:d6:a8:
                    22:37:32:c8:71:60:ee:b0:f1:f2:c5:64:f6:ba:47:
                    5f:fc:e6:07:78:32:2d:f6:ca:80:20:c9:fd:70:f8:
                    72:93:21:88:45
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C3:C4:A4:58:05:63:D7:83:06:BA:96:8D:DC:B2:8F:32:F6:BB:B7:41
            X509v3 Authority Key Identifier: 
                keyid:E5:9D:59:30:82:47:58:CC:AC:FA:08:54:36:86:7B:3A:B5:04:4D:F0

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/Omniroot2025.crl

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113635.100.5.11.4
                Policy: 2.23.140.1.2.2
                Policy: 2.16.840.1.114412.0.2.4
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         5e:4f:cf:65:98:69:65:4d:7e:2c:3e:6e:8b:1e:be:c2:10:c4:
         e7:35:a1:63:e2:61:a3:a7:d5:c8:26:02:d2:ed:f6:06:1a:de:
         ea:f4:d2:3d:fc:f7:32:37:a4:57:09:09:bd:d2:a2:91:03:6c:
         74:29:90:9e:54:16:8f:a0:dd:ad:32:82:8d:dd:00:97:4b:a8:
         b0:65:b8:ec:35:72:c8:bb:3f:36:08:5a:fd:80:ef:08:15:07:
         93:f7:b8:c3:95:8a:03:0b:b5:f0:1c:be:4c:78:b5:ff:ee:8d:
         a2:51:ec:48:3a:40:bf:d6:da:b4:ce:c4:ed:96:75:20:29:2e:
         54:38:f1:25:6e:7f:cd:4d:5e:ce:f1:fe:46:df:9c:e1:6c:66:
         9f:19:96:e7:d1:61:a1:59:12:24:4a:91:e1:a0:f4:69:91:4c:
         ad:21:f5:50:66:29:74:98:30:61:a8:3d:a1:82:b5:33:b9:1a:
         f5:77:af:9c:35:cc:7e:1d:79:c5:04:92:25:ab:a8:d0:8f:89:
         ce:92:f4:f7:3d:20:e4:06:99:1e:c6:0e:cd:f6:8a:00:8b:de:
         2c:bb:6f:48:e4:b2:b9:5c:b4:db:4b:e0:b5:63:af:30:78:db:
         10:bc:2b:c8:46:d8:fe:d5:b9:75:e8:8e:7c:3d:d7:22:ad:1f:
         e7:bd:45:e7

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26