ThawteG5TLSRSA4096SHA3842022CA1.crt: CN=Thawte G5 TLS RSA4096 SHA384 2022 CA1,O=DigiCert, Inc.,C=US (Intermediate Certificate, Expiring 2032-05-25) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/ThawteG5TLSRSA4096SHA3842022CA1.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/ThawteG5TLSRSA4096SHA3842022CA1.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fe:2a:b3:22:69:01:c0:14:83:80:3d:28:cc:e1:f2
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=DigiCert, Inc., CN=DigiCert TLS RSA4096 Root G5
        Validity
            Not Before: May 26 00:00:00 2022 GMT
            Not After : May 25 23:59:59 2032 GMT
        Subject: C=US, O=DigiCert, Inc., CN=Thawte G5 TLS RSA4096 SHA384 2022 CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:b1:99:e0:19:21:39:33:da:4c:0e:0a:fd:e2:b3:
                    f8:07:0a:58:3e:1a:0f:fe:b7:d5:fa:8e:16:11:f3:
                    66:f3:74:aa:b2:bf:84:38:31:2e:73:da:35:06:98:
                    f6:97:cc:42:21:3a:fe:35:96:de:52:e7:d4:30:1e:
                    e5:11:8d:0c:bf:57:5d:b2:70:d4:30:52:72:e1:31:
                    77:c6:85:b2:7a:da:d9:c1:5f:d7:b3:44:ee:52:76:
                    90:6f:a6:30:c8:e0:21:62:2e:79:79:57:e9:61:3c:
                    0f:b3:bb:74:32:e0:28:ac:00:09:65:21:0b:66:89:
                    9f:6b:1a:a1:c6:de:ac:22:f5:48:60:00:7b:f3:10:
                    33:07:e3:80:5a:c7:65:6f:be:00:3e:9a:98:15:e4:
                    d5:a8:9a:f6:c8:eb:a9:3b:c3:7e:b7:e6:20:a5:a8:
                    6b:26:b4:41:5d:d6:9a:91:2b:69:6b:0d:af:ca:35:
                    cb:bd:2a:89:90:b7:b8:ae:48:36:40:f9:39:78:ba:
                    ef:21:7f:41:7d:34:0c:9a:ae:be:d7:10:70:24:17:
                    1c:22:0c:af:fd:9f:b1:df:c1:55:41:06:5a:e2:d4:
                    e8:6f:53:80:cf:14:4e:c4:e2:b0:69:b8:e5:cf:93:
                    b2:f8:44:fc:12:88:93:1a:d6:a2:33:e6:9a:e6:2c:
                    84:4b:c6:e3:2b:1b:73:39:22:a4:3e:5b:da:6d:62:
                    1b:d0:2f:30:53:bd:42:08:ce:3c:ba:d8:67:ef:27:
                    92:aa:d2:dd:40:be:59:8a:3a:5a:6b:b1:20:96:e9:
                    1e:5b:1b:ec:82:be:b2:1d:b0:37:2f:73:12:60:53:
                    d6:4a:be:d1:f1:98:2d:d3:1a:17:24:c9:b5:32:15:
                    07:8b:81:dd:35:71:7a:e4:24:64:4f:d1:d7:06:cc:
                    86:2f:df:b8:d6:f3:67:6b:e0:ed:4e:bc:96:d9:9e:
                    5f:3f:6f:a7:31:20:8b:a5:d9:f4:f1:4b:47:63:82:
                    85:b7:a3:0e:e1:bc:5b:bf:d1:93:54:33:9a:38:4c:
                    73:1a:06:de:91:23:c7:b5:17:6c:77:5c:9a:84:c0:
                    9a:d0:7a:04:b7:25:88:a3:9a:28:60:0b:90:7f:b6:
                    a8:30:29:99:97:4b:4b:b8:d9:ef:68:31:01:f4:ca:
                    f5:14:06:01:ed:55:ec:21:ec:21:80:9e:84:e5:2a:
                    23:83:cb:a6:7c:43:44:d4:73:f7:6c:18:60:fd:13:
                    c8:7f:11:c8:9a:d5:f7:8a:54:dd:e8:90:1f:d5:39:
                    90:65:39:a3:01:e2:e3:52:06:9d:21:5b:c5:ee:5f:
                    ee:43:3e:ef:90:d8:fe:f1:a3:05:3b:77:e6:2f:39:
                    f8:f4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                4D:E7:6F:61:AC:FA:4B:02:35:6F:A8:57:3C:E1:4E:A0:45:3C:0E:67
            X509v3 Authority Key Identifier: 
                keyid:51:33:1C:ED:36:40:AF:17:D3:25:CD:69:68:F2:AF:4E:23:3E:B3:41

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertTLSRSA4096RootG5.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertTLSRSA4096RootG5.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.2.1
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
                Policy: 2.23.140.1.2.3

    Signature Algorithm: sha384WithRSAEncryption
         97:fa:3e:b2:4b:ee:a8:9a:64:c0:73:4e:39:b1:10:70:3f:f6:
         ca:35:73:73:6d:91:a3:c0:8f:c4:e8:72:1f:b0:bd:32:d0:01:
         98:80:02:fc:20:84:72:de:5a:c1:16:03:30:d4:cb:50:78:f5:
         14:f5:76:cb:c0:86:33:75:d7:ec:7a:1b:ef:9e:9d:ab:0f:3e:
         82:d1:1a:e3:d8:31:b5:07:90:5c:dd:6e:87:58:e4:39:38:55:
         97:98:8b:9f:71:99:a1:87:2e:2d:35:f1:19:5c:67:cb:0e:68:
         76:a7:d3:86:03:05:65:9d:7c:04:68:fa:51:6d:ca:25:4d:ad:
         91:62:45:80:b0:49:c5:88:a2:7e:6c:59:f3:6c:91:d1:90:fe:
         69:3f:1f:77:2f:df:3b:9b:13:1d:6f:1e:94:52:3b:ec:b6:97:
         a4:b1:77:40:2e:f1:74:f2:ad:00:c2:7c:14:29:f0:62:a5:19:
         02:88:4a:c4:43:6e:a1:70:01:53:6c:14:63:86:14:9d:ba:0e:
         81:d1:35:34:f2:b9:59:da:2e:41:ac:df:d0:72:c0:18:be:b1:
         3d:61:b1:d0:90:14:80:b7:6e:f8:e5:bb:6b:ec:76:12:68:5d:
         8b:71:0c:30:8a:be:0a:d1:77:c3:72:ee:8b:c9:bf:63:07:6e:
         f7:fc:49:67:3a:b9:1c:2d:ae:5d:2e:47:a4:8d:43:76:cf:cb:
         e4:b1:5e:59:ca:ff:0e:15:3b:6d:ba:ec:6b:91:72:6c:02:82:
         43:b0:2b:a6:96:6e:9e:bf:38:46:76:c4:98:35:a4:a2:8e:44:
         bb:ca:bd:a5:03:85:bf:0c:93:76:d8:c0:5f:36:76:d7:2a:cd:
         1a:67:d4:d9:3a:a0:22:58:51:72:37:79:30:0e:c9:f4:ad:5f:
         bd:20:a6:6d:7b:9c:4e:a5:d3:23:3f:a0:03:6a:54:fc:5e:09:
         77:b5:fe:25:b4:4b:28:cd:18:bb:43:0d:c4:6f:a6:b9:21:ef:
         13:8d:1d:71:bb:74:25:25:52:8a:a3:9e:f5:71:c5:5f:62:b1:
         b6:d1:88:0d:f3:d8:15:47:72:46:f8:b6:1c:73:77:9b:4a:f2:
         7b:5d:91:2c:82:79:f3:b9:99:b5:7a:92:87:e9:14:c2:60:5c:
         2b:1f:b3:50:a2:94:9a:df:49:d3:c7:31:3c:78:d3:bc:fd:89:
         dd:0d:d8:be:9d:72:ba:18:ef:b7:aa:13:c8:f2:95:96:9d:92:
         d2:79:9c:8b:b3:89:a7:52:6a:c9:de:a7:e9:6d:80:76:d0:49:
         4d:49:4c:55:1a:87:54:53:fc:4f:64:7b:da:c5:cb:5b:1f:15:
         e5:e9:74:b2:e6:4f:b6:bb

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06