R1-ServerCA1A.orig.cer: CN=Amazon,OU=Server CA 1A,O=Amazon,C=US (Intermediate Certificate, Expiring 2040-10-21) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.amazontrust.com/repository/R1-ServerCA1A.orig.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.amazontrust.com/repository/R1-ServerCA1A.orig.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7b:50:58:1e:55:45:82:3c:0b:a6:2f:63:09:de:5f:ca:49:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon Root CA 1
        Validity
            Not Before: Oct 21 22:23:40 2015 GMT
            Not After : Oct 21 22:23:40 2040 GMT
        Subject: C=US, O=Amazon, OU=Server CA 1A, CN=Amazon
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:cd:d7:0a:c2:19:ba:7b:fc:6d:22:71:3a:
                    a9:1c:fd:e7:7c:ee:e2:fb:e8:50:c1:ee:d7:81:35:
                    38:43:44:1f:b5:27:b6:88:4e:e6:9d:6c:d7:c7:e5:
                    97:d9:ca:4a:dd:67:5a:90:2c:ac:4f:e8:3c:07:3a:
                    62:6b:f6:ed:9b:e0:8c:63:51:7f:6a:50:cb:aa:e0:
                    1d:36:82:10:f6:83:ac:94:dd:88:af:12:8b:19:ed:
                    fa:68:b2:b0:f6:4c:13:76:f4:9a:60:3c:6a:ce:ae:
                    93:84:f8:0a:d9:b8:8a:41:8d:d2:85:8a:77:a6:bb:
                    a7:d3:0c:3d:0d:09:e4:25:7f:21:d7:77:53:4e:63:
                    27:d8:44:b4:da:c6:5a:43:aa:bf:f6:33:8d:41:81:
                    29:16:41:f4:8f:1c:7c:91:58:d4:20:58:18:86:b0:
                    84:1a:4b:c4:ca:d2:0f:0e:5a:2d:68:bf:bf:3e:d8:
                    af:43:59:3f:80:1e:05:d6:01:a9:e3:64:af:75:19:
                    fc:a0:3d:72:58:4a:50:06:c5:28:81:03:01:ff:2a:
                    10:0c:89:f8:5a:a0:56:00:6c:7d:18:ba:88:66:77:
                    ce:41:e3:91:b6:c5:5b:28:a7:84:cc:0e:c9:74:d3:
                    b5:3b:aa:74:bb:b1:d2:78:8d:81:b3:12:fb:da:fd:
                    af:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                62:D4:42:5E:86:70:75:6A:90:BC:C6:B8:D2:4D:60:C2:34:BA:51:3A
            X509v3 Authority Key Identifier: 
                keyid:84:18:CC:85:34:EC:BC:0C:94:94:2E:08:59:9C:C7:B2:10:4E:0A:08

            Authority Information Access: 
                OCSP - URI:http://ocsp.rootca1.amazontrust.com
                CA Issuers - URI:http://crl.rootca1.amazontrust.com/rootca1.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.rootca1.amazontrust.com/rootca1.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         7c:ee:9d:49:96:c4:82:3b:84:44:41:7f:70:04:b4:f5:92:41:
         99:df:b7:94:7d:a5:92:3a:54:2e:a8:71:30:c4:8f:c1:ed:8d:
         c6:17:87:24:ee:3a:87:2a:76:db:4e:48:70:cf:fe:ff:39:71:
         50:82:15:8a:2b:2c:3c:35:f2:ac:43:7a:5a:54:1a:ed:08:6e:
         fd:47:1f:0a:c3:9d:0a:2d:73:8d:b1:bd:39:ed:59:d9:44:21:
         42:11:e1:cb:cc:c0:13:4f:d2:b1:96:b1:0e:44:29:76:09:f2:
         23:ea:08:ea:c1:33:2d:7a:10:24:b8:22:c2:83:34:17:a4:33:
         07:e9:f5:f0:22:4f:8a:17:66:ce:a0:92:d9:0e:7b:80:04:cb:
         10:3e:ee:9b:22:c3:d1:42:ef:9a:be:89:45:ad:07:cb:13:40:
         14:e2:27:62:c6:01:9d:2f:57:f2:69:22:56:0f:b5:89:7b:0c:
         dc:68:e6:a3:09:d7:bc:2b:f1:1b:c5:9f:e4:31:c5:84:ec:7d:
         fd:66:80:e8:2d:24:f8:ae:2d:2e:c3:b7:81:e6:32:5b:f2:c8:
         e5:01:59:c0:93:16:eb:e8:9e:15:38:e1:c8:8e:84:cc:4a:25:
         a3:b6:7a:3d:66:8d:07:85:f6:eb:ad:75:36:96:75:22:b5:a7:
         e7:a8:45:0b

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06