SecureSiteCAG2.crt: CN=Secure Site CA G2,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2029-06-20) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: http://crl.digicert-cn.com/SecureSiteCAG2.crt (in DER format )
Serial Number : 11288560079016559585197880693544383762
SHA-1 Fingerprint : 8d888b3cae20c74f4ce1b30bf51ee36eab562cde
SHA-1 Fingerprint : 8d:88:8b:3c:ae:20:c7:4f:4c:e1:b3:0b:f5:1e:e3:6e:ab:56:2c:de
SHA-256 Fingerprint : f614ae2b101484f15f66f4dda56ee6eb422728f179d94399ede19ac1d85a8bd3
SHA-256 Fingerprint : f6:14:ae:2b:10:14:84:f1:5f:66:f4:dd:a5:6e:e6:eb:42:27:28:f1:79:d9:43:99:ed:e1:9a:c1:d8:5a:8b:d3
Signature Hash Algorithm : sha256
Subject : CN=Secure Site CA G2,OU=www.digicert.com,O=DigiCert Inc,C=US
- Country Name: US (United States of America)
- Organization: DigiCert Inc
- Organization Unit: www.digicert.com
- Common Name: Secure Site CA G2
Not Valid Before: 2019-06-20 12:21:35
Not Valid After: 2029-06-20 12:21:35
Issuer (Parent Certificate):
- Issuer Name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US .

Download certificate through curl:

curl -sSL "http://crl.digicert-cn.com/SecureSiteCAG2.crt" --output cert.crt

Download certificate through wget:

wget -q "http://crl.digicert-cn.com/SecureSiteCAG2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7e:18:fb:8f:aa:92:7e:e8:76:0a:0d:89:82:f5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Jun 20 12:21:35 2019 GMT
            Not After : Jun 20 12:21:35 2029 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Secure Site CA G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:3d:d3:77:d1:e9:28:29:03:4f:14:76:12:
                    84:50:86:47:6b:62:20:ec:a3:cd:91:3b:70:31:2d:
                    7e:d3:c6:12:e5:04:84:0c:ce:03:43:1c:b8:f2:33:
                    fc:75:99:32:c9:4f:49:ff:45:82:9b:c3:65:bf:98:
                    1a:ec:73:80:c6:17:49:72:ff:82:3c:fe:28:69:dc:
                    7c:11:b7:6b:9a:30:07:ac:63:af:eb:8a:07:be:de:
                    c8:9d:ae:ee:cc:b7:77:92:ba:b1:77:47:68:7a:ec:
                    51:a5:31:ef:14:0c:a3:69:48:71:8d:27:d9:c7:4c:
                    21:d5:fe:96:ee:9a:cf:9b:b5:79:d1:57:13:b9:d8:
                    f8:ac:8f:b1:b4:75:d4:70:50:2e:17:3e:1b:71:aa:
                    53:72:bb:b9:69:a6:75:bf:a1:76:ba:c3:02:31:53:
                    3e:c4:9c:44:65:cb:14:33:8b:93:c5:d2:1f:5b:91:
                    54:4c:8d:1d:6c:ff:0d:c9:99:2b:fd:65:73:2f:9f:
                    5a:1b:00:44:e1:95:34:24:a0:65:80:49:ad:90:5a:
                    4b:3d:1e:c9:0b:36:2e:9d:a7:ee:ee:73:24:e5:86:
                    36:e9:60:ce:99:ec:e9:58:38:f3:0f:12:7c:c5:a9:
                    22:cf:29:16:61:3e:60:74:96:04:dd:42:e5:51:ed:
                    f5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C4:11:7E:88:40:86:C2:41:BF:65:F3:1A:E1:B4:53:40:A3:AB:EC:7D
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                OCSP - URI:http://ocsp.dcocsp.cn

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert-cn.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua

    Signature Algorithm: sha256WithRSAEncryption
         13:ef:25:5b:96:30:22:e8:91:b0:79:f8:81:84:51:55:b2:e6:
         23:2a:56:c1:81:fb:e2:52:17:9d:08:80:2d:e5:2c:52:45:9f:
         5b:b2:80:d0:04:45:d5:e9:77:61:a4:c0:83:cf:eb:eb:3c:97:
         79:94:dd:96:19:dd:c4:a3:8a:bc:ee:4d:fa:b9:c7:58:90:7a:
         6b:77:c9:51:19:fa:7b:42:3e:ac:3c:ca:57:56:5a:72:fd:95:
         c7:f6:47:2d:99:b3:6b:f6:e9:e0:0c:e2:06:b0:ce:88:f9:56:
         fc:ab:63:e8:02:d0:cc:08:2a:ef:43:b2:b6:4f:61:b4:bb:a9:
         05:63:ee:a6:52:43:77:28:46:a9:bf:51:7d:0b:d6:73:51:5a:
         d4:7c:17:74:14:22:a0:93:e2:6d:f3:1a:62:41:cc:63:7a:53:
         6c:eb:f6:af:33:0a:12:86:70:1c:31:ea:c8:2e:f7:44:8f:49:
         82:aa:a2:5c:7c:34:ac:82:fc:03:5b:8b:dc:8a:f2:99:71:2b:
         9b:27:13:a9:b4:a8:cd:0c:22:88:47:db:f9:cc:73:63:cd:98:
         68:dc:da:2e:92:72:22:cb:74:4f:64:26:74:30:e7:82:6c:9d:
         d8:b1:26:9b:83:4a:79:74:6b:70:54:61:5c:30:c5:7e:92:27:
         f7:70:7b:24

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates