DigiCertTLSHybridECCSHA3842020CA1.crt: CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is intermediate certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1.crt (DER format)
  • Serial number: 13496724667447682545480095667406392836
  • SHA-1 Fingerprint: 51e39a8bdb08878c52d6186588a0fa266a69cf28
  • SHA-1 Fingerprint: 51:e3:9a:8b:db:08:87:8c:52:d6:18:65:88:a0:fa:26:6a:69:cf:28
  • SHA-256 Fingerprint: d79a2d5e03295c0e9feae36d021ebd5209700ab1a9e817a43f30fa3c66f78d21
  • SHA-256 Fingerprint: d7:9a:2d:5e:03:29:5c:0e:9f:ea:e3:6d:02:1e:bd:52:09:70:0a:b1:a9:e8:17:a4:3f:30:fa:3c:66:f7:8d:21
  • Signature hash algorithm: sha384
  • Subject: CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1,O=DigiCert Inc,C=US
  • Not valid before: 2020-09-23 00:00:00
  • Not valid after: 2030-09-22 23:59:59
  • Issuer:

Download certificate through curl:

curl -sSL http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:27:5f:e7:04:d6:ee:cb:23:d5:cd:5b:4b:1a:4e:04
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Sep 23 00:00:00 2020 GMT
            Not After : Sep 22 23:59:59 2030 GMT
        Subject: C=US, O=DigiCert Inc, CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:c1:1b:c6:9a:5b:98:d9:a4:29:a0:e9:d4:04:b5:
                    db:eb:a6:b2:6c:55:c0:ff:ed:98:c6:49:2f:06:27:
                    51:cb:bf:70:c1:05:7a:c3:b1:9d:87:89:ba:ad:b4:
                    13:17:c9:a8:b4:83:c8:b8:90:d1:cc:74:35:36:3c:
                    83:72:b0:b5:d0:f7:22:69:c8:f1:80:c4:7b:40:8f:
                    cf:68:87:26:5c:39:89:f1:4d:91:4d:da:89:8b:e4:
                    03:c3:43:e5:bf:2f:73
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0A:BC:08:29:17:8C:A5:39:6D:7A:0E:CE:33:C7:2E:B3:ED:FB:C3:7A
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootCA.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
                Policy: 2.23.140.1.2.3

    Signature Algorithm: sha384WithRSAEncryption
         de:3a:97:1b:85:bd:7b:8c:0a:58:e3:e3:f0:0b:06:00:7a:af:
         44:63:2a:7f:dd:81:6d:11:18:a6:fa:f7:38:60:b1:b0:39:62:
         bd:b8:7b:2e:f0:08:c9:92:5b:73:df:65:90:b7:de:b4:57:ac:
         c0:2f:1c:99:67:4d:8b:5e:f2:01:a1:ad:f7:96:53:cd:d5:df:
         51:27:37:06:46:f2:6f:3c:31:89:2c:4a:16:29:11:82:e7:ed:
         b7:42:14:93:e0:d9:60:fa:3f:1c:64:cb:32:c3:31:17:24:d9:
         af:3e:55:6f:ff:0f:80:6f:1b:01:08:ca:a4:04:63:c8:da:53:
         4c:f2:19:26:c4:f6:9d:df:5c:fa:9f:9f:12:5e:a2:5d:1f:f6:
         d8:17:8e:b6:62:f8:1d:81:b6:0a:3b:2b:68:6c:f0:32:4e:0a:
         f7:99:82:39:b1:48:de:0b:3a:89:c7:5f:8d:2f:27:3c:9c:02:
         bc:21:bd:87:c6:70:be:22:ba:d6:cd:f4:4b:bd:53:6f:7b:c2:
         9a:37:d1:2d:04:7e:d3:b8:cc:0d:5b:84:a9:0c:29:86:af:a7:
         d8:d6:1d:ed:0e:31:e1:91:36:fd:3c:0d:fa:ce:86:89:ce:ed:
         1c:23:0d:ba:e6:f6:6d:ea:10:a6:61:62:42:fb:f8:fe:7e:06:
         70:70:fc:0b

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26