DigiCertAssuredIDClientCAG2.crt: CN=DigiCert Assured ID Client CA G2,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2034-09-23) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertAssuredIDClientCAG2.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertAssuredIDClientCAG2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fa:e1:f3:1a:2b:43:3c:3d:9a:e1:6d:64:3b:58:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G2
        Validity
            Not Before: Sep 23 12:25:32 2019 GMT
            Not After : Sep 23 12:25:32 2034 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Client CA G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b1:45:ad:3a:ac:bc:0a:06:fa:c3:6f:fa:90:
                    f1:1b:57:7d:e2:80:f6:8d:00:e3:6a:19:6c:b1:78:
                    19:8a:f8:5d:db:7d:24:4f:2b:dc:f2:51:20:e5:19:
                    0f:55:37:98:49:67:e1:2f:da:66:84:b9:e1:0f:b9:
                    11:cb:37:ab:61:86:4f:f6:7c:d9:57:80:3c:b7:86:
                    bc:9a:13:d0:b4:b9:b7:fc:d7:79:47:1b:32:e0:c5:
                    5a:0c:a3:df:79:22:7a:c9:ee:ba:c9:ce:5a:fa:48:
                    4a:8c:4d:fa:80:47:e2:8a:34:fa:85:22:1c:8e:b9:
                    98:c8:cc:02:56:fd:df:1e:ac:69:b8:7d:90:ab:c7:
                    42:f1:c2:e3:1d:ae:ef:06:2f:e7:e3:57:8e:76:ce:
                    84:94:bf:d4:d8:c6:ab:eb:a0:2c:c5:de:95:d1:4c:
                    cf:43:b9:a8:52:03:a6:7d:da:40:65:34:86:dc:89:
                    43:64:99:cb:11:2a:95:4a:e0:ba:7b:2b:62:3f:70:
                    81:f5:bb:5e:e8:40:8b:68:f4:cb:97:7d:a0:c4:f4:
                    4a:e5:5e:28:51:67:42:14:c4:93:90:77:7e:af:8e:
                    04:e5:b4:01:4d:89:75:6d:6b:f7:6f:54:b5:16:c0:
                    af:c4:69:2e:dd:39:58:8d:86:d9:13:55:56:51:d8:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A5:62:20:50:DC:BB:5B:57:97:AD:23:8F:35:E2:54:6C:A9:7E:F9:4E
            X509v3 Authority Key Identifier: 
                keyid:CE:C3:4A:B9:99:55:F2:B8:DB:60:BF:A9:7E:BD:56:B5:97:36:A7:D6

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, E-mail Protection, Microsoft Encrypted File System, Microsoft Smartcardlogin, 1.3.6.1.4.1.311.10.3.12, 1.2.840.113583.1.1.5
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootG2.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua

    Signature Algorithm: sha256WithRSAEncryption
         76:6b:6c:24:02:a3:73:00:22:a4:74:91:e9:06:62:b0:bb:d0:
         40:06:44:34:6a:d7:50:8e:b9:f3:44:5e:17:29:bf:76:07:e8:
         13:21:52:85:62:9c:f3:cd:81:fa:39:1c:fa:d9:00:5a:cb:2b:
         f2:8f:5d:87:49:76:09:00:48:6b:08:35:a6:c0:7d:8d:a5:8d:
         46:89:c0:a9:69:21:ec:30:8d:2e:8a:b8:61:27:e7:d3:20:89:
         d6:80:50:f8:7a:95:b7:ad:22:84:6c:2e:10:aa:0b:30:27:5f:
         56:8b:f7:d7:e3:08:c7:f8:34:c5:8b:50:2f:13:aa:8b:67:9e:
         b2:8d:bb:0e:09:4a:3c:78:7d:c4:2c:f9:4e:53:d5:b6:e0:9f:
         20:f1:fb:cc:9b:38:db:88:10:3b:e2:9c:77:4a:0e:ed:95:8e:
         81:02:cd:ec:f6:cb:fd:48:55:33:e5:87:9e:f3:05:f8:c7:25:
         01:6a:2d:6c:c7:76:8b:bc:33:eb:9c:74:9b:6b:da:cc:17:20:
         8e:ac:de:79:2a:e2:97:c4:9f:b2:a7:6f:33:12:f6:ab:85:4a:
         ec:8e:18:82:dc:83:fd:ea:57:06:87:34:b3:39:47:ef:27:07:
         98:0f:23:9f:ae:e5:48:79:eb:0d:62:fb:d0:ec:d6:98:d8:02:
         24:c7:75:e5

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06