DeveloperIDG2CA.cer: C=US,O=Apple Inc.,OU=G2,CN=Developer ID Certification Authority (Intermediate Certificate, Expiring 2031-09-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.apple.com/certificateauthority/DeveloperIDG2CA.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.apple.com/certificateauthority/DeveloperIDG2CA.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b4:00:3f:cd:97:49:7a:cb:83:4d:92:a4:8a:78:73:c2:84:5d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple Root CA
        Validity
            Not Before: Sep 22 18:55:10 2021 GMT
            Not After : Sep 17 00:00:00 2031 GMT
        Subject: CN=Developer ID Certification Authority, OU=G2, O=Apple Inc., C=US
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:95:68:21:54:91:8a:bf:65:71:c2:18:4e:
                    f6:cd:0d:e1:91:28:75:d7:03:ba:95:1f:d3:12:99:
                    52:44:de:80:46:67:fc:29:8b:00:85:88:8a:30:87:
                    4d:4c:6e:4a:b4:c7:e5:02:e3:d7:63:4c:aa:cc:ea:
                    ec:db:42:2f:91:7d:25:e9:5f:a4:4b:2a:54:6f:17:
                    ac:30:9f:29:28:34:a4:7f:8f:e5:78:e3:5d:23:2a:
                    21:46:d0:89:c3:5f:f8:6a:97:9d:71:1b:18:a8:b2:
                    0c:c9:03:0a:35:b2:02:a7:2d:f5:b3:dc:1b:83:c5:
                    27:21:40:72:a6:e7:37:76:31:e7:bb:06:bf:74:b2:
                    f6:70:ac:4c:ac:2d:cd:c9:5e:45:8b:cf:fb:08:e6:
                    62:d5:40:95:b5:37:5c:cc:1b:0e:e1:ef:dc:a5:e5:
                    8d:c9:50:b7:40:9f:0a:23:25:45:40:8f:94:67:7b:
                    e0:94:ea:39:d3:78:a5:34:d1:c2:cb:e0:33:7f:2e:
                    b6:2c:c3:e5:26:d5:25:ce:aa:8d:2a:77:fc:9e:14:
                    96:97:e0:f5:5f:2e:f2:e8:a7:71:a7:3b:a3:99:4c:
                    7a:22:a3:4d:ef:70:11:d5:d6:86:81:82:f1:67:33:
                    93:33:5a:40:b1:92:c4:aa:73:96:1d:c4:5c:ff:e1:
                    eb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Authority Key Identifier: 
                keyid:2B:D0:69:47:94:76:09:FE:F4:6B:8D:2E:40:A6:F7:47:4D:7F:08:5E

            Authority Information Access: 
                OCSP - URI:http://ocsp.apple.com/ocsp03-applerootca

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.apple.com/root.crl

            X509v3 Subject Key Identifier: 
                F8:3A:0C:69:11:76:E0:ED:AC:D1:EB:A6:59:FA:37:D5:C4:55:B0:1E
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.2.840.113635.100.6.2.6: 
                ..
    Signature Algorithm: sha256WithRSAEncryption
         c1:fd:43:0a:59:bf:f1:b1:b7:43:10:5a:d6:18:32:30:14:56:
         26:e1:11:48:63:2b:69:72:97:48:1f:8e:5b:ca:5e:26:15:fb:
         74:23:80:33:54:33:19:a1:22:86:5a:d8:b8:4b:69:aa:a7:ce:
         96:96:c2:0a:c7:35:6a:d0:6f:ce:8a:69:83:62:6d:4a:39:f5:
         fe:83:4d:d7:a2:d4:88:1f:ed:88:c0:0f:f8:f9:33:1e:b4:10:
         b7:c2:5c:11:37:44:37:04:b0:a4:44:9d:8c:68:0d:7b:7d:1d:
         7e:cc:b5:93:f0:d6:6f:3d:15:7a:80:a5:74:d3:e1:8f:7d:d2:
         88:e8:31:a7:98:c5:1f:df:e2:82:59:ae:80:81:60:46:16:ec:
         9e:b9:8a:40:aa:1b:2a:e1:61:86:0a:8c:70:0f:d9:4a:2c:ec:
         4c:a2:05:11:d6:79:8c:a5:63:25:21:23:02:6f:93:5b:5a:57:
         a1:d7:45:6d:df:cc:f7:7f:9f:5f:db:c7:ed:64:a7:6f:44:2f:
         6f:4d:3d:78:78:0a:56:b4:3b:d7:3a:c8:2b:65:a2:93:ea:db:
         58:ea:8e:d4:b9:c4:c0:30:fc:32:1a:4d:ba:92:0c:24:39:98:
         82:3a:a0:99:de:e7:e4:e4:bc:0e:bc:85:af:5a:ab:5c:d0:fc:
         db:cc:10:c3

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIEPjCCAyagAwIBAgIUf7QAP82XSXrLg02SpIp4c8KEXUMwDQYJKoZIhvcNAQEL
BQAwYjELMAkGA1UEBhMCVVMxEzARBgNVBAoTCkFwcGxlIEluYy4xJjAkBgNVBAsT
HUFwcGxlIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRYwFAYDVQQDEw1BcHBsZSBS
b290IENBMB4XDTIxMDkyMjE4NTUxMFoXDTMxMDkxNzAwMDAwMFowXjEtMCsGA1UE
AwwkRGV2ZWxvcGVyIElEIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MQswCQYDVQQL
DAJHMjETMBEGA1UECgwKQXBwbGUgSW5jLjELMAkGA1UEBhMCVVMwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLJVoIVSRir9lccIYTvbNDeGRKHXXA7qV
H9MSmVJE3oBGZ/wpiwCFiIowh01Mbkq0x+UC49djTKrM6uzbQi+RfSXpX6RLKlRv
F6wwnykoNKR/j+V4410jKiFG0InDX/hql51xGxiosgzJAwo1sgKnLfWz3BuDxSch
QHKm5zd2Mee7Br90svZwrEysLc3JXkWLz/sI5mLVQJW1N1zMGw7h79yl5Y3JULdA
nwojJUVAj5Rne+CU6jnTeKU00cLL4DN/LrYsw+Um1SXOqo0qd/yeFJaX4PVfLvLo
p3GnO6OZTHoio03vcBHV1oaBgvFnM5MzWkCxksSqc5YdxFz/4es3AgMBAAGjge8w
gewwEgYDVR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBQr0GlHlHYJ/vRrjS5A
pvdHTX8IXjBEBggrBgEFBQcBAQQ4MDYwNAYIKwYBBQUHMAGGKGh0dHA6Ly9vY3Nw
LmFwcGxlLmNvbS9vY3NwMDMtYXBwbGVyb290Y2EwLgYDVR0fBCcwJTAjoCGgH4Yd
aHR0cDovL2NybC5hcHBsZS5jb20vcm9vdC5jcmwwHQYDVR0OBBYEFPg6DGkRduDt
rNHrpln6N9XEVbAeMA4GA1UdDwEB/wQEAwIBBjAQBgoqhkiG92NkBgIGBAIFADAN
BgkqhkiG9w0BAQsFAAOCAQEAwf1DClm/8bG3QxBa1hgyMBRWJuERSGMraXKXSB+O
W8peJhX7dCOAM1QzGaEihlrYuEtpqqfOlpbCCsc1atBvzoppg2JtSjn1/oNN16LU
iB/tiMAP+PkzHrQQt8JcETdENwSwpESdjGgNe30dfsy1k/DWbz0VeoCldNPhj33S
iOgxp5jFH9/iglmugIFgRhbsnrmKQKobKuFhhgqMcA/ZSizsTKIFEdZ5jKVjJSEj
Am+TW1pXoddFbd/M93+fX9vH7WSnb0Qvb009eHgKVrQ71zrIK2Wik+rbWOqO1LnE
wDD8MhpNupIMJDmYgjqgmd7n5OS8DryFr1qrXND828wQww==
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06