DigiCertSecureSiteCNCAG3.crt: CN=DigiCert Secure Site CN CA G3,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2030-03-13) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://cacerts.digicert.cn/DigiCertSecureSiteCNCAG3.crt" --output cert.crt

Download certificate through wget:

wget -q "http://cacerts.digicert.cn/DigiCertSecureSiteCNCAG3.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c9:35:1a:e6:f0:ac:6e:b0:06:fb:0c:2a:a7:32:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Mar 13 12:00:00 2020 GMT
            Not After : Mar 13 12:00:00 2030 GMT
        Subject: C=US, O=DigiCert Inc, CN=DigiCert Secure Site CN CA G3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5b:cb:1f:cc:d7:38:fc:0c:ac:1e:59:11:d6:
                    94:b5:fb:a9:5d:58:f7:00:32:08:b7:db:9a:6f:16:
                    67:9a:73:89:55:e1:11:e2:00:43:06:6b:99:ff:9c:
                    ef:6a:d8:8a:2e:ac:c4:d3:99:70:d3:7a:ef:49:78:
                    e2:5a:30:30:19:26:50:59:bc:73:e2:a5:08:c4:6c:
                    4e:a6:fc:a9:b1:6e:6d:6e:f7:27:2a:43:c6:f6:fb:
                    36:b6:3f:ae:f8:a4:8a:08:23:00:ef:dd:9c:e2:ba:
                    e8:5c:e0:47:8e:54:07:97:e1:13:fb:19:d6:73:79:
                    f1:a1:bc:3b:c8:bd:6f:4e:11:1c:06:40:ac:2e:2b:
                    b8:04:4e:5e:11:33:33:12:99:6e:67:98:55:4f:7d:
                    44:21:24:e4:53:e2:f6:aa:85:4f:aa:f9:76:bc:22:
                    ca:99:be:22:28:96:07:a4:62:26:d6:a5:46:46:07:
                    f9:e2:4c:5f:85:19:7d:ac:4b:b8:93:6a:d0:79:46:
                    89:87:8a:f9:74:ac:f5:cb:44:c5:07:02:c8:00:ce:
                    27:c0:65:5c:eb:51:f9:4b:ce:f8:32:dd:59:c3:98:
                    b6:93:19:d1:ca:63:0d:83:91:45:b8:29:10:14:8a:
                    e3:52:51:6f:94:3a:21:32:80:4d:46:f6:ed:cc:74:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                44:D9:C8:4A:33:8E:D3:52:8D:A7:92:94:61:1F:9A:C8:A5:B7:EC:CB
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.cn

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua

    Signature Algorithm: sha256WithRSAEncryption
         81:1b:cd:ea:e0:4c:f8:58:ed:d1:70:a9:e2:01:f9:f4:65:cd:
         88:08:7e:8e:34:c7:5b:aa:6f:eb:07:de:29:af:08:2e:55:e7:
         b9:92:55:53:d7:c0:47:b6:84:31:c2:a6:8d:be:cc:61:aa:a2:
         de:b4:12:45:6d:2c:5d:3e:6d:4a:42:5d:f7:dc:de:6c:d5:c7:
         ab:62:ec:65:fe:ce:75:0a:e5:58:78:d5:aa:0d:cb:50:14:6a:
         b6:bf:89:64:1b:71:45:e8:df:60:6b:44:f9:97:13:e9:0c:ce:
         dd:d5:5b:14:04:eb:26:cf:af:f9:78:48:07:2e:b0:43:a6:bb:
         00:93:cf:39:13:46:db:6f:58:26:bd:54:b8:18:e5:2b:19:d2:
         32:23:fb:f7:91:bd:02:51:c6:ff:31:db:8f:c7:ad:32:3d:e4:
         e3:28:f9:c4:c5:b3:a8:9a:8a:08:fe:93:ce:46:9b:1b:5b:a5:
         81:09:27:83:3c:13:a0:2d:ac:14:3f:8b:af:e3:85:56:39:46:
         cb:04:73:19:f4:b1:41:2f:97:c2:e9:c6:79:6b:bf:27:9d:0f:
         d9:7a:76:28:18:0e:60:79:8c:04:c1:ab:c8:bc:69:a2:e2:0f:
         b8:32:6a:1d:c6:1d:ec:e2:c2:e2:a6:79:bb:f7:09:e4:f2:e3:
         8a:3e:39:13

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06