DigiCertBasicRSACNCAG2.crt: CN=DigiCert Basic RSA CN CA G2,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2030-03-04) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt (in DER format )
Serial Number : 3945536626060115757871306302828950262
SHA-1 Fingerprint : 4d1fa5d1fb1ac3917c08e43f65015e6aea571179
SHA-1 Fingerprint : 4d:1f:a5:d1:fb:1a:c3:91:7c:08:e4:3f:65:01:5e:6a:ea:57:11:79
SHA-256 Fingerprint : cb57b3ff2040cb269497625bc90fa9d7b4ed4938c6f60f42f69afdf508ac2993
SHA-256 Fingerprint : cb:57:b3:ff:20:40:cb:26:94:97:62:5b:c9:0f:a9:d7:b4:ed:49:38:c6:f6:0f:42:f6:9a:fd:f5:08:ac:29:93
Signature Hash Algorithm : sha256
Subject : CN=DigiCert Basic RSA CN CA G2,O=DigiCert Inc,C=US
- Country Name: US (United States of America)
- Organization: DigiCert Inc
- Common Name: DigiCert Basic RSA CN CA G2
Not Valid Before: 2020-03-04 12:04:07
Not Valid After: 2030-03-04 12:04:07
Issuer (Parent Certificate):
- Issuer Name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US .

Download certificate through curl:

curl -sSL "http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt" --output cert.crt

Download certificate through wget:

wget -q "http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f7:e1:f9:82:ba:d0:09:af:f4:7d:c9:57:41:b2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Mar  4 12:04:07 2020 GMT
            Not After : Mar  4 12:04:07 2030 GMT
        Subject: C=US, O=DigiCert Inc, CN=DigiCert Basic RSA CN CA G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:f6:fa:65:3d:85:f8:aa:33:63:50:8e:50:
                    4f:a5:20:71:cf:11:8e:45:89:15:d7:02:da:13:30:
                    bc:f6:cd:43:a4:4b:6e:39:af:10:11:87:8a:79:c3:
                    96:90:70:6f:c1:59:90:11:96:56:ff:83:8e:77:de:
                    f7:cd:b9:84:1c:04:1f:68:9a:23:40:fa:42:98:c4:
                    77:a4:5b:e4:48:47:54:68:c8:4b:82:1c:ba:6a:4a:
                    91:dd:d0:f6:d4:1a:58:f7:1e:58:1f:13:c8:2e:07:
                    e5:75:cf:15:14:d1:e3:6b:76:2b:7a:9a:65:b7:46:
                    3d:1a:78:3c:6d:eb:b0:92:d7:80:21:bc:33:57:03:
                    56:68:bb:70:3f:70:32:68:e2:e2:48:b2:d2:22:f9:
                    ff:c5:56:6a:39:b4:f5:21:eb:1c:2d:06:16:4e:70:
                    c2:21:8e:ee:78:f2:26:a4:d4:dd:a7:d8:69:fe:68:
                    5e:1d:5e:05:ad:62:2b:41:5e:1d:a6:fb:0a:e8:f1:
                    13:56:9f:8f:fe:bd:bf:cd:86:0a:28:2b:50:7c:b1:
                    36:a9:e6:ca:9c:69:1b:3d:ef:43:be:c7:09:8f:e3:
                    2a:f6:d8:24:ab:24:a9:27:01:17:f4:46:0c:4f:92:
                    2a:ec:73:c3:ff:8d:d8:4e:36:23:2f:ff:41:3f:1b:
                    8c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                06:BD:A6:9B:60:79:50:31:BE:D5:A9:02:4A:A0:D0:95:53:8B:2F:34
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.cn

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.1
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua
                Policy: 2.23.140.1.2.2

    Signature Algorithm: sha256WithRSAEncryption
         0d:64:22:57:06:5e:94:07:62:12:52:c8:1f:9c:47:3b:76:02:
         d0:33:95:fc:bc:03:aa:d7:19:4e:e6:9d:9d:ef:42:35:4c:27:
         67:18:cf:fe:44:0b:2b:94:7b:d0:1f:98:72:1e:af:bb:ca:a2:
         78:62:c9:e9:bc:cf:06:1e:7f:b6:58:85:d5:80:5c:de:51:ff:
         68:d2:07:08:37:58:79:49:60:e8:a0:c5:c6:8d:d4:b8:d8:c5:
         28:b2:e0:2c:4c:7d:ab:79:e0:6e:34:be:14:30:32:68:4f:0e:
         66:23:04:d1:1b:64:22:df:3e:f8:55:54:c9:bd:74:4f:25:82:
         4b:f9:2a:d8:f4:77:51:1f:7f:36:60:40:17:2b:98:28:e1:a4:
         4c:6a:ab:d7:63:f3:9b:4d:f1:88:2f:4b:4a:2f:2d:4c:83:9a:
         1a:59:ad:52:94:d4:e0:99:aa:fe:80:4b:12:18:bb:81:f0:b6:
         35:c9:1e:ef:22:92:cc:09:b2:44:17:cd:d3:9c:27:2a:c3:c8:
         40:35:12:62:1a:15:45:c9:10:7b:e5:40:ee:48:74:22:e6:bb:
         de:66:ea:5f:cd:f0:1f:e8:e6:b2:00:49:39:36:37:a6:8c:eb:
         83:e4:08:1e:5e:f9:f2:97:cd:eb:3c:e2:77:c0:0c:75:71:73:
         03:c5:c2:d4

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates