ThawteRSACA2018.crt: CN=Thawte RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2027-11-06) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/ThawteRSACA2018.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/ThawteRSACA2018.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5a:8a:ef:19:6f:7e:0d:6c:21:04:b2:1a:e6:70:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Nov  6 12:23:52 2017 GMT
            Not After : Nov  6 12:23:52 2027 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Thawte RSA CA 2018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:5e:e5:53:8a:97:1c:1e:43:2f:b6:8a:a7:
                    56:e9:8b:84:43:a8:ac:9d:7a:55:82:7a:14:4b:86:
                    b7:2f:8f:52:9f:1c:ca:b1:20:5b:6f:ba:22:dd:a6:
                    9c:2d:78:da:e9:06:08:4e:be:13:a6:eb:cb:bb:3e:
                    b9:05:0c:3e:4a:e1:f0:32:1f:13:4e:f5:06:c5:47:
                    73:89:3e:80:a3:8b:f1:01:24:9b:a3:99:66:92:6b:
                    68:ad:0d:2d:b4:cd:72:a2:f4:f9:38:5a:65:a6:b4:
                    8c:53:c1:08:1a:84:f8:fd:2e:f3:11:75:6e:dc:6a:
                    31:29:ac:0d:87:cc:93:60:78:df:25:ba:26:59:91:
                    c6:83:52:35:a6:ca:9c:b8:28:1a:ce:d7:1c:ee:14:
                    bf:76:5c:65:ab:38:1e:79:e9:7c:cc:49:23:26:a2:
                    52:50:66:d0:59:61:ff:a0:fe:9a:4c:0c:9f:f9:e8:
                    8e:de:09:8b:b8:15:c1:a4:08:4c:26:9c:7b:06:db:
                    fd:8a:74:5b:58:7e:cd:63:a4:91:2f:45:f0:7a:3c:
                    94:0b:8a:7c:b2:05:a9:67:93:9f:68:e5:95:63:60:
                    d8:58:95:5f:e0:55:ef:93:a7:11:3b:7c:e6:92:d8:
                    66:44:e0:ab:bd:a7:8f:cd:a4:85:78:41:24:54:e7:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A3:C8:5E:65:54:E5:30:78:C1:05:EA:07:0A:6A:59:CC:B9:FE:DE:5A
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         44:4d:85:e5:dd:1c:82:8c:e1:64:d5:a8:90:22:df:76:18:65:
         ea:65:d2:3b:25:37:4a:83:da:99:87:16:7c:b1:f5:0b:33:30:
         0f:c6:b5:fa:91:6f:c0:72:10:7e:f9:70:5c:51:fc:32:b8:c1:
         dc:2f:a3:56:86:cd:6d:55:91:ae:0a:92:dc:9b:1a:d2:5b:51:
         1f:f1:5f:b3:a6:53:80:fe:16:25:89:b5:48:da:54:6e:04:7b:
         2d:65:03:d8:5f:8f:4e:f2:81:33:f8:1f:f5:e4:b2:a8:fe:0e:
         88:9b:25:61:a6:b7:f0:d5:35:69:50:31:64:8d:79:a3:ee:31:
         5f:84:59:32:a2:97:20:80:53:1b:65:7e:a0:f0:63:43:5a:0f:
         98:71:80:0b:fc:96:b7:67:93:86:f6:fc:fe:b7:bb:3a:94:a9:
         51:d2:72:7c:67:fd:ed:77:8c:e0:f8:89:02:5e:be:e0:74:17:
         86:3c:0d:ed:93:d9:2a:b4:2f:f4:0c:b7:dc:c8:26:60:b5:50:
         03:ec:7d:1c:e3:59:5f:1f:6f:bf:2f:29:97:d6:ee:f8:d5:58:
         58:a1:b1:cc:6c:41:2b:40:81:a3:39:95:50:27:97:40:f2:4a:
         3d:36:65:79:8b:8d:33:5f:29:53:53:fc:5e:1d:42:0e:0b:8c:
         f9:91:28:7b

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06