apevsrsa2g1.der: CN=Apple Public EV Server RSA CA 2 - G1,O=Apple Inc.,C=US (Intermediate Certificate, Expiring 2030-04-10) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: http://certs.apple.com/apevsrsa2g1.der (in DER format )
Serial Number : 9426474316794109319861715536286797912
SHA-1 Fingerprint : 8ba88d2c0f20439fb7d00f3910159023cfe91dc8
SHA-1 Fingerprint : 8b:a8:8d:2c:0f:20:43:9f:b7:d0:0f:39:10:15:90:23:cf:e9:1d:c8
SHA-256 Fingerprint : d6ef3e09ebe0d9370e51f5c09a532b3ac70d3ce822253f9fc84c28e9bfa550d5
SHA-256 Fingerprint : d6:ef:3e:09:eb:e0:d9:37:0e:51:f5:c0:9a:53:2b:3a:c7:0d:3c:e8:22:25:3f:9f:c8:4c:28:e9:bf:a5:50:d5
Signature Hash Algorithm : sha256
Subject : CN=Apple Public EV Server RSA CA 2 - G1,O=Apple Inc.,C=US
- Country Name: US (United States of America)
- Organization: Apple Inc.
- Common Name: Apple Public EV Server RSA CA 2 - G1
Not Valid Before: 2020-04-29 12:54:50
Not Valid After: 2030-04-10 23:59:59
Issuer (Parent Certificate):
- Issuer Name: CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: https://images.apple.com/certificateauthority/pdf/Apple_Certificate_Policy_v4.0.pdf
- Certificate Practice Statement (CPS) URL: https://images.apple.com/certificateauthority/pdf/Apple_Public_CA_CPS_v5.11.pdf
- Auditor: Ernst & Young, LLP
- Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=15b92005-0ad5-4bc7-a9f1-3f2b27097bf0
- Standard Audit Period Start Date: 2021.04.16
- Standard Audit Period End Date: 2022.04.15
- Standard Audit Statement Date: 2022.07.09
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://crl.apple.com/apevsrsa2g1.crl
- Check its issuer’s audit information: CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US .

Download certificate through curl:

curl -sSL "http://certs.apple.com/apevsrsa2g1.der" --output cert.crt

Download certificate through wget:

wget -q "http://certs.apple.com/apevsrsa2g1.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:17:79:11:00:5d:22:67:f6:88:92:f6:8f:8b:50:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
        Validity
            Not Before: Apr 29 12:54:50 2020 GMT
            Not After : Apr 10 23:59:59 2030 GMT
        Subject: C=US, O=Apple Inc., CN=Apple Public EV Server RSA CA 2 - G1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:00:fd:a5:df:5f:b9:38:71:49:eb:ba:93:d8:
                    c3:4d:33:dc:5c:14:ea:70:2f:c1:ea:53:3b:cb:9e:
                    51:c0:54:b2:64:06:a6:97:31:e4:17:84:ca:78:2f:
                    67:c3:d2:89:e1:f4:18:71:ca:ed:19:c7:6e:02:c2:
                    87:2a:27:d8:7f:44:a6:06:28:ec:d4:35:ca:b7:02:
                    e5:31:ef:a3:75:6b:94:03:fa:53:be:3a:39:14:83:
                    c5:46:db:bf:8c:f5:e6:40:2c:ca:f0:01:50:21:62:
                    f1:2e:c8:5e:4c:c3:22:38:4e:20:23:6b:03:c7:d7:
                    52:95:0a:6c:87:1c:23:62:6f:33:3e:d1:bf:0e:46:
                    78:6e:dc:69:ad:ae:fa:f4:88:dd:39:81:9f:03:1c:
                    8d:5a:a5:b1:27:2a:63:ab:5b:13:f8:e2:ec:2f:d7:
                    0f:0e:f0:52:93:07:c9:a4:0c:54:63:ce:ee:62:5f:
                    8b:4f:d0:6e:25:0f:5b:09:c2:24:f6:00:a8:fa:6f:
                    05:58:de:06:1d:1a:bd:40:86:68:fd:99:b5:97:36:
                    26:7b:35:0b:c8:7d:79:b2:46:f9:9d:da:c1:d8:01:
                    a9:03:d8:0f:62:3e:7f:2f:da:06:d9:d3:3a:48:67:
                    04:9b:62:f2:3c:61:d5:38:4d:57:ae:52:f5:2b:9c:
                    65:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                50:55:AB:43:A1:AF:A9:48:2B:5A:C1:A2:87:89:04:E4:7A:0E:CA:DA
            X509v3 Authority Key Identifier: 
                keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.2.1
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua
                Policy: 2.23.140.1.1

    Signature Algorithm: sha256WithRSAEncryption
         a6:5e:6c:50:b6:65:5c:2b:4e:3f:ae:ea:70:e8:dc:ed:37:7b:
         4f:e0:fe:13:7e:e9:4e:62:03:b5:fd:74:11:a6:43:1d:c2:ec:
         d9:0f:34:05:74:99:4a:1a:92:5b:1c:78:80:48:43:f6:c2:ee:
         eb:5d:83:09:d2:29:39:e6:e4:77:55:8a:90:12:c8:b9:68:53:
         b4:cf:da:30:2d:0d:07:40:c4:16:af:98:b9:c5:c1:cc:17:06:
         9e:a7:d7:bb:8b:a7:eb:8f:53:80:d9:82:e6:cc:f7:a2:f2:51:
         08:a5:52:56:04:45:b8:2e:eb:aa:c2:2b:5f:23:46:6a:1b:0e:
         f1:53:f0:4e:f5:a1:4d:77:a3:53:9e:ff:55:94:1c:56:d3:ca:
         74:64:29:6e:f7:24:37:76:ad:9d:b5:3e:29:bb:2c:42:55:63:
         73:9c:46:6b:58:34:76:8c:fe:5b:a7:63:1d:59:43:ed:1f:c3:
         b1:dc:e4:9f:f1:47:bb:e5:46:2b:b2:3f:e7:c9:f6:e7:2e:0d:
         8b:a9:2e:0d:f7:dc:38:b9:47:b2:59:21:f9:d7:e3:67:9c:5f:
         40:dd:d3:02:1e:b8:58:f4:1c:18:c7:e9:cd:b9:15:4a:2f:fc:
         56:b9:66:3a:f4:54:f8:e6:9a:03:7a:3e:7a:0c:02:b5:19:5c:
         39:10:7b:73

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates