DigiCertGlobalG3CodeSigningECCP256SHA3842021CA1.crt: CN=DigiCert Global G3 Code Signing ECC P256 SHA384 2021 CA1,O=DigiCert, Inc.,C=US (Intermediate Certificate, Expiring 2036-07-27) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertGlobalG3CodeSigningECCP256SHA3842021CA1.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertGlobalG3CodeSigningECCP256SHA3842021CA1.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0b:5a:3f:fa:58:66:42:4f:a6:82:fd:07:ef:dd:19
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
        Validity
            Not Before: Jul 28 00:00:00 2021 GMT
            Not After : Jul 27 23:59:59 2036 GMT
        Subject: C=US, O=DigiCert, Inc., CN=DigiCert Global G3 Code Signing ECC P256 SHA384 2021 CA1
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:19:10:c4:bf:1f:af:48:aa:25:5f:df:91:ad:29:
                    a0:16:9d:c2:8c:66:f3:47:eb:24:91:26:e4:07:d3:
                    24:55:da:28:70:82:41:2a:5f:f0:77:e6:49:f3:2e:
                    ca:27:c7:a5:37:99:28:0a:54:42:5e:a4:43:63:c9:
                    66:a2:1a:3a:41
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                8A:DC:6A:7F:73:C0:27:38:AF:03:D8:DC:9E:F5:79:CC:89:08:31:07
            X509v3 Authority Key Identifier: 
                keyid:B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG3.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.3
                Policy: 2.23.140.1.4.1

    Signature Algorithm: ecdsa-with-SHA384
         30:64:02:30:15:cc:dd:29:b4:d6:74:f0:13:54:01:d3:0a:27:
         28:2d:ca:c8:cd:bc:11:cf:c4:f7:a6:36:4c:4d:3d:cb:21:c4:
         9b:80:1e:9d:b0:f9:43:15:02:1f:97:20:91:b7:a0:cd:02:30:
         63:aa:39:5e:ef:12:ca:10:24:1a:86:fd:cd:cb:d9:58:d6:dd:
         e8:fc:46:de:73:3c:4c:5c:00:9e:62:f5:cf:2c:99:89:42:27:
         83:6d:0e:cc:c6:f8:10:8d:ec:f6:7e:19

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06