appleistca8g1_bc.cer: C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple IST CA 8 - G1 (Intermediate Certificate, Expiring 2025-05-07) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: http://certs.apple.com/appleistca8g1_bc.cer (in DER format )
Serial Number : 13670455340762890388728203980962011364
SHA-1 Fingerprint : 43673e88aff8a34b839211f4c8193397e64cb306
SHA-1 Fingerprint : 43:67:3e:88:af:f8:a3:4b:83:92:11:f4:c8:19:33:97:e6:4c:b3:06
SHA-256 Fingerprint : 5c29dbea9b7cc8b02418f28c1c8736dfdf170665d098ef681d903be76987d249
SHA-256 Fingerprint : 5c:29:db:ea:9b:7c:c8:b0:24:18:f2:8c:1c:87:36:df:df:17:06:65:d0:98:ef:68:1d:90:3b:e7:69:87:d2:49
Signature Hash Algorithm : sha256
Subject : C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple IST CA 8 - G1
- Common Name: Apple IST CA 8 - G1
- Organization Unit: Certification Authority
- Organization: Apple Inc.
- Country Name: US (United States of America)
Not Valid Before: 2018-12-12 12:00:00
Not Valid After: 2025-05-07 12:00:00
Issuer (Parent Certificate):
- Issuer Name: CN=Baltimore CyberTrust Root,OU=CyberTrust,O=Baltimore,C=IE
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: https://images.apple.com/certificateauthority/pdf/Apple_Certificate_Policy_v4.0.pdf
- Certificate Practice Statement (CPS) URL: https://images.apple.com/certificateauthority/pdf/Apple_Public_CA_CPS_v5.11.pdf
- Auditor: Ernst & Young, LLP
- Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=15b92005-0ad5-4bc7-a9f1-3f2b27097bf0
- Standard Audit Period Start Date: 2021.04.16
- Standard Audit Period End Date: 2022.04.15
- Standard Audit Statement Date: 2022.07.09
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://crl.apple.com/appleistca8g1.crl
- Check its issuer’s audit information: CN=Baltimore CyberTrust Root,OU=CyberTrust,O=Baltimore,C=IE .

Download certificate through curl:

curl -sSL "http://certs.apple.com/appleistca8g1_bc.cer" --output cert.crt

Download certificate through wget:

wget -q "http://certs.apple.com/appleistca8g1_bc.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:48:d5:7c:65:fb:0e:6c:f7:04:a3:64:5f:14:18:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
        Validity
            Not Before: Dec 12 12:00:00 2018 GMT
            Not After : May  7 12:00:00 2025 GMT
        Subject: CN=Apple IST CA 8 - G1, OU=Certification Authority, O=Apple Inc., C=US
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:2d:54:8e:68:b0:10:13:ef:f4:2d:db:d8:09:b2:
                    43:e8:9d:65:99:6e:34:b8:d4:97:c9:8e:c9:d6:a8:
                    22:37:32:c8:71:60:ee:b0:f1:f2:c5:64:f6:ba:47:
                    5f:fc:e6:07:78:32:2d:f6:ca:80:20:c9:fd:70:f8:
                    72:93:21:88:45
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C3:C4:A4:58:05:63:D7:83:06:BA:96:8D:DC:B2:8F:32:F6:BB:B7:41
            X509v3 Authority Key Identifier: 
                keyid:E5:9D:59:30:82:47:58:CC:AC:FA:08:54:36:86:7B:3A:B5:04:4D:F0

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/Omniroot2025.crl

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113635.100.5.11.4
                Policy: 2.23.140.1.2.2
                Policy: 2.16.840.1.114412.0.2.4
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         5e:4f:cf:65:98:69:65:4d:7e:2c:3e:6e:8b:1e:be:c2:10:c4:
         e7:35:a1:63:e2:61:a3:a7:d5:c8:26:02:d2:ed:f6:06:1a:de:
         ea:f4:d2:3d:fc:f7:32:37:a4:57:09:09:bd:d2:a2:91:03:6c:
         74:29:90:9e:54:16:8f:a0:dd:ad:32:82:8d:dd:00:97:4b:a8:
         b0:65:b8:ec:35:72:c8:bb:3f:36:08:5a:fd:80:ef:08:15:07:
         93:f7:b8:c3:95:8a:03:0b:b5:f0:1c:be:4c:78:b5:ff:ee:8d:
         a2:51:ec:48:3a:40:bf:d6:da:b4:ce:c4:ed:96:75:20:29:2e:
         54:38:f1:25:6e:7f:cd:4d:5e:ce:f1:fe:46:df:9c:e1:6c:66:
         9f:19:96:e7:d1:61:a1:59:12:24:4a:91:e1:a0:f4:69:91:4c:
         ad:21:f5:50:66:29:74:98:30:61:a8:3d:a1:82:b5:33:b9:1a:
         f5:77:af:9c:35:cc:7e:1d:79:c5:04:92:25:ab:a8:d0:8f:89:
         ce:92:f4:f7:3d:20:e4:06:99:1e:c6:0e:cd:f6:8a:00:8b:de:
         2c:bb:6f:48:e4:b2:b9:5c:b4:db:4b:e0:b5:63:af:30:78:db:
         10:bc:2b:c8:46:d8:fe:d5:b9:75:e8:8e:7c:3d:d7:22:ad:1f:
         e7:bd:45:e7

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates