DigiSignCADigiSSL.crt: CN=Digi-Sign CA Digi-SSL,O=Digi-Sign Limited,L=Dublin,ST=County Dublin,C=IE (Intermediate Certificate, Expiring 2024-11-06) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://crt.usertrust.com/DigiSignCADigiSSL.crt" --output cert.crt

Download certificate through wget:

wget -q "http://crt.usertrust.com/DigiSignCADigiSSL.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:32:49:d2:55:74:7b:4e:23:fe:b3:84:e5:cd:ca:b5
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
        Validity
            Not Before: Nov  7 00:00:00 2014 GMT
            Not After : Nov  6 23:59:59 2024 GMT
        Subject: C=IE, ST=County Dublin, L=Dublin, O=Digi-Sign Limited, CN=Digi-Sign CA Digi-SSL
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:89:53:0c:c7:14:91:ae:c5:82:9f:60:14:b8:
                    ae:f7:c6:e3:f3:f2:fa:39:32:24:16:99:c5:48:07:
                    25:0f:f3:31:79:8c:50:ef:1b:ad:08:ee:67:42:6a:
                    0b:d4:f2:0b:5e:85:20:fd:48:6f:94:91:57:95:d6:
                    9e:97:a8:e9:c6:01:01:42:1e:c2:02:2f:c8:4b:67:
                    ef:53:de:66:96:73:1a:99:ad:56:ef:ec:93:35:33:
                    e2:dd:5d:39:99:32:37:30:4d:a1:4a:c1:cf:dd:0c:
                    05:ae:ad:7f:bb:c7:20:26:cb:b5:65:b9:6d:ad:4a:
                    bc:75:c5:13:21:f8:60:2b:19:24:af:43:9b:1f:e6:
                    d1:f4:95:be:f8:14:ab:3d:fb:f0:47:3f:4e:32:de:
                    1b:81:bb:66:34:a2:fe:41:a7:66:1c:b0:41:91:28:
                    59:6a:62:ea:ba:9e:ad:94:32:72:d4:c9:ab:c7:a6:
                    98:6a:ae:d7:16:51:7e:53:30:ef:a4:46:12:a7:e1:
                    65:15:29:9b:43:00:85:3c:e4:1f:e1:8d:7d:b2:34:
                    aa:22:6b:c5:70:a3:1c:ad:b6:6c:2c:a2:76:59:09:
                    51:1c:bf:0f:f3:1f:71:58:4b:d6:2c:c8:cc:45:c4:
                    74:5a:60:4f:41:18:0b:f6:bc:3a:7d:c3:ec:3f:9a:
                    56:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB

            X509v3 Subject Key Identifier: 
                78:29:0F:AE:CD:90:2C:C0:DC:D2:7A:D4:9B:5F:9C:45:E0:88:A8:2C
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.9
                Policy: 2.23.140.1.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha384WithRSAEncryption
         43:a9:0e:94:2e:7b:64:7c:57:6a:94:9d:d9:5a:9b:58:59:28:
         c0:42:4e:e8:ba:bd:5f:e1:9d:a3:fd:e5:09:35:b6:d2:29:84:
         57:4e:a6:a8:dc:2f:ac:d1:2e:85:d3:99:35:0e:12:56:71:e1:
         0d:19:60:5c:fe:39:0b:a6:16:d9:29:85:55:e9:54:b8:4a:75:
         68:14:98:62:4b:ba:01:fb:b2:75:eb:57:f9:51:ee:be:6b:fc:
         b0:83:fd:ce:aa:af:09:5c:f4:ca:3d:13:f7:f8:77:14:83:06:
         66:f3:07:e9:9f:74:43:c3:1f:e6:49:57:1c:41:3d:f0:4e:0d:
         22:6b:c9:5e:9c:f8:b4:b8:4e:4d:f3:2a:bc:f9:a2:9b:3e:13:
         6a:2a:43:0a:f4:26:ef:4b:e0:5a:04:24:35:03:32:73:23:01:
         79:74:53:d8:cf:6a:4c:7c:26:bf:5f:80:b5:dc:be:8e:d2:09:
         82:7a:95:bb:22:54:52:59:39:7f:32:14:26:a0:58:01:a4:9f:
         25:a7:55:79:62:eb:37:63:71:e4:9d:f4:54:5e:7c:1b:9d:29:
         d8:a6:a1:9a:3a:23:57:7a:62:77:80:cf:59:e8:90:fa:49:df:
         20:b9:bb:21:a5:64:07:68:8b:76:ce:68:aa:49:02:be:bb:2f:
         50:b1:5e:11:a8:a4:63:00:ef:cd:86:b6:b9:77:a0:90:97:18:
         7a:51:4e:d6:a9:06:82:7d:9f:ca:fc:7a:fa:39:bf:c4:16:77:
         37:ef:97:cb:13:b5:cd:df:c7:62:2c:0b:ad:dd:d5:d2:68:0b:
         37:6a:35:64:fe:57:20:98:59:01:d8:c1:72:a5:53:62:78:93:
         8c:3d:6a:41:05:a2:81:e6:e1:73:31:04:07:89:56:ad:36:f3:
         b5:a1:a0:66:f4:15:69:4e:42:07:cf:03:be:1b:89:fc:3a:97:
         58:22:87:30:f2:02:97:2d:35:07:c9:13:89:6d:9f:49:d7:ce:
         96:63:b8:92:11:ee:5a:d7:7e:e9:34:bb:c6:6c:00:48:cf:d8:
         e1:e7:8b:55:18:dc:b9:89:97:64:c3:9c:7d:0c:48:cb:17:46:
         e9:23:80:f3:d2:08:a0:ba:bd:50:0b:e0:e6:7c:18:06:47:4d:
         af:37:d6:10:d3:0d:4b:32:cd:d7:84:2e:ed:1b:3f:e8:35:1b:
         e5:cb:84:1e:c1:93:e1:07:3d:fc:32:9d:b7:d9:d1:bc:19:f1:
         fb:a7:eb:9b:b3:1b:b1:2c:40:7e:db:90:de:85:b3:1a:6e:f9:
         f1:a5:08:ff:76:5c:7c:43:c1:44:f2:ae:bf:74:b2:38:04:b9:
         4e:7d:c8:8d:c6:c0:a5:82

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06