SecureSiteCAG2.crt: CN=Secure Site CA G2,OU=www.digicert.com,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://crl.digicert-cn.com/SecureSiteCAG2.crt (DER format)
  • Serial number: 11288560079016559585197880693544383762
  • SHA-1 Fingerprint: 8d888b3cae20c74f4ce1b30bf51ee36eab562cde
  • SHA-1 Fingerprint: 8d:88:8b:3c:ae:20:c7:4f:4c:e1:b3:0b:f5:1e:e3:6e:ab:56:2c:de
  • SHA-256 Fingerprint: f614ae2b101484f15f66f4dda56ee6eb422728f179d94399ede19ac1d85a8bd3
  • SHA-256 Fingerprint: f6:14:ae:2b:10:14:84:f1:5f:66:f4:dd:a5:6e:e6:eb:42:27:28:f1:79:d9:43:99:ed:e1:9a:c1:d8:5a:8b:d3
  • Signature hash algorithm: sha256
  • Subject: CN=Secure Site CA G2,OU=www.digicert.com,O=DigiCert Inc,C=US
  • Not valid before: 2019-06-20 12:21:35
  • Not valid after: 2029-06-20 12:21:35
  • Issuer:
    • Issuer name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://crl.digicert-cn.com/SecureSiteCAG2.crt --output cert.crt

Download certificate through wget:

wget -q http://crl.digicert-cn.com/SecureSiteCAG2.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7e:18:fb:8f:aa:92:7e:e8:76:0a:0d:89:82:f5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Jun 20 12:21:35 2019 GMT
            Not After : Jun 20 12:21:35 2029 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Secure Site CA G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:3d:d3:77:d1:e9:28:29:03:4f:14:76:12:
                    84:50:86:47:6b:62:20:ec:a3:cd:91:3b:70:31:2d:
                    7e:d3:c6:12:e5:04:84:0c:ce:03:43:1c:b8:f2:33:
                    fc:75:99:32:c9:4f:49:ff:45:82:9b:c3:65:bf:98:
                    1a:ec:73:80:c6:17:49:72:ff:82:3c:fe:28:69:dc:
                    7c:11:b7:6b:9a:30:07:ac:63:af:eb:8a:07:be:de:
                    c8:9d:ae:ee:cc:b7:77:92:ba:b1:77:47:68:7a:ec:
                    51:a5:31:ef:14:0c:a3:69:48:71:8d:27:d9:c7:4c:
                    21:d5:fe:96:ee:9a:cf:9b:b5:79:d1:57:13:b9:d8:
                    f8:ac:8f:b1:b4:75:d4:70:50:2e:17:3e:1b:71:aa:
                    53:72:bb:b9:69:a6:75:bf:a1:76:ba:c3:02:31:53:
                    3e:c4:9c:44:65:cb:14:33:8b:93:c5:d2:1f:5b:91:
                    54:4c:8d:1d:6c:ff:0d:c9:99:2b:fd:65:73:2f:9f:
                    5a:1b:00:44:e1:95:34:24:a0:65:80:49:ad:90:5a:
                    4b:3d:1e:c9:0b:36:2e:9d:a7:ee:ee:73:24:e5:86:
                    36:e9:60:ce:99:ec:e9:58:38:f3:0f:12:7c:c5:a9:
                    22:cf:29:16:61:3e:60:74:96:04:dd:42:e5:51:ed:
                    f5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C4:11:7E:88:40:86:C2:41:BF:65:F3:1A:E1:B4:53:40:A3:AB:EC:7D
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                OCSP - URI:http://ocsp.dcocsp.cn

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert-cn.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua

    Signature Algorithm: sha256WithRSAEncryption
         13:ef:25:5b:96:30:22:e8:91:b0:79:f8:81:84:51:55:b2:e6:
         23:2a:56:c1:81:fb:e2:52:17:9d:08:80:2d:e5:2c:52:45:9f:
         5b:b2:80:d0:04:45:d5:e9:77:61:a4:c0:83:cf:eb:eb:3c:97:
         79:94:dd:96:19:dd:c4:a3:8a:bc:ee:4d:fa:b9:c7:58:90:7a:
         6b:77:c9:51:19:fa:7b:42:3e:ac:3c:ca:57:56:5a:72:fd:95:
         c7:f6:47:2d:99:b3:6b:f6:e9:e0:0c:e2:06:b0:ce:88:f9:56:
         fc:ab:63:e8:02:d0:cc:08:2a:ef:43:b2:b6:4f:61:b4:bb:a9:
         05:63:ee:a6:52:43:77:28:46:a9:bf:51:7d:0b:d6:73:51:5a:
         d4:7c:17:74:14:22:a0:93:e2:6d:f3:1a:62:41:cc:63:7a:53:
         6c:eb:f6:af:33:0a:12:86:70:1c:31:ea:c8:2e:f7:44:8f:49:
         82:aa:a2:5c:7c:34:ac:82:fc:03:5b:8b:dc:8a:f2:99:71:2b:
         9b:27:13:a9:b4:a8:cd:0c:22:88:47:db:f9:cc:73:63:cd:98:
         68:dc:da:2e:92:72:22:cb:74:4f:64:26:74:30:e7:82:6c:9d:
         d8:b1:26:9b:83:4a:79:74:6b:70:54:61:5c:30:c5:7e:92:27:
         f7:70:7b:24

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26