RapidSSLECCCA2018.crt: CN=RapidSSL ECC CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.rapidssl.com/RapidSSLECCCA2018.crt (DER format)
  • Serial number: 17768326171260957628622269284150916988
  • SHA-1 Fingerprint: 63b76fff3b3864eeb549b1e37851d46b603feddc
  • SHA-1 Fingerprint: 63:b7:6f:ff:3b:38:64:ee:b5:49:b1:e3:78:51:d4:6b:60:3f:ed:dc
  • SHA-256 Fingerprint: a0d1523a0bf663550eb9081e9bddeda12814f9570b7697d95df2ea53d4ff75e3
  • SHA-256 Fingerprint: a0:d1:52:3a:0b:f6:63:55:0e:b9:08:1e:9b:dd:ed:a1:28:14:f9:57:0b:76:97:d9:5d:f2:ea:53:d4:ff:75:e3
  • Signature hash algorithm: sha256
  • Subject: CN=RapidSSL ECC CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US
  • Not valid before: 2017-11-06 12:24:03
  • Not valid after: 2027-11-06 12:24:03
  • Issuer:
    • Issuer name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.rapidssl.com/RapidSSLECCCA2018.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.rapidssl.com/RapidSSLECCCA2018.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5e:0e:1d:e2:31:a1:c1:0a:1c:fc:69:cd:e3:b7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Nov  6 12:24:03 2017 GMT
            Not After : Nov  6 12:24:03 2027 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=RapidSSL ECC CA 2018
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:f2:f4:a4:15:25:f1:30:c6:73:01:1d:47:df:41:
                    51:98:dc:dc:73:bf:cd:cf:d5:cf:c8:9b:2a:dc:00:
                    a7:63:8c:dc:85:0c:11:01:36:34:ab:5e:08:99:f4:
                    a9:15:75:62:23:d4:7f:ad:d2:5a:fd:ca:31:94:05:
                    14:67:e0:86:83
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                42:60:B5:B3:49:4E:BA:D7:43:A8:3D:68:E7:D5:9A:24:25:F9:66:D3
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.2
                  CPS: https://www.digicert.com/CPS
                Policy: 2.16.840.1.114412.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2

    Signature Algorithm: sha256WithRSAEncryption
         d5:ce:55:8c:b5:75:9b:e3:74:9a:69:de:99:be:a8:10:47:aa:
         c8:35:ac:31:c9:30:6d:66:09:80:ea:cf:29:d4:5d:b6:7d:09:
         27:73:9d:08:5a:54:bb:7d:25:48:5d:a0:cf:d7:7c:fe:78:2a:
         0b:eb:4c:91:6c:55:c8:29:a3:37:51:d8:48:ba:b7:75:9a:dc:
         7e:9f:00:fe:bb:d3:7b:78:fb:59:56:13:34:b2:3a:04:74:b4:
         d9:02:4c:30:44:df:8b:8a:26:67:51:1e:a0:df:1a:01:03:02:
         9b:0e:9b:d7:44:35:5d:69:1e:69:04:53:a6:5d:0a:3c:e6:81:
         4a:6c:79:3c:60:8a:40:6c:25:fa:98:f5:62:07:0e:43:10:ab:
         3b:5c:90:24:73:d0:6a:e0:9e:65:a4:c3:09:07:ff:54:ef:48:
         07:66:91:48:6b:0e:cf:70:e1:e2:59:ce:14:ca:67:33:52:da:
         ac:0a:6e:52:3f:48:05:94:f3:53:d2:1a:fd:a9:cc:9c:56:01:
         3f:73:85:70:fc:27:e0:04:a8:66:21:c3:3d:1e:6b:7c:31:b8:
         45:ca:2d:26:b9:09:ae:2b:85:0f:c7:d5:c3:92:0e:2e:11:ab:
         0b:cb:1d:62:46:23:4f:20:11:52:26:ea:ff:75:11:a3:0c:70:
         e7:69:05:2e

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26