SecureSiteCA.crt: CN=Secure Site CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Last Updated: 2022-03-26

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

Certificate download URL: http://cacerts.digicert.com/SecureSiteCA.crt (DER format)
Serial number: 7736448255260114499072335397114259231
SHA-1 Fingerprint: 8dfb5e1bd7d7428e0aa8a8cd09367bf497cefd2f
SHA-1 Fingerprint: 8d:fb:5e:1b:d7:d7:42:8e:0a:a8:a8:cd:09:36:7b:f4:97:ce:fd:2f
SHA-256 Fingerprint: b26eb310f8faf0ef5b0d0b71aa65ec050fa3ade29134fb438ab6440288fa6e67
SHA-256 Fingerprint: b2:6e:b3:10:f8:fa:f0:ef:5b:0d:0b:71:aa:65:ec:05:0f:a3:ad:e2:91:34:fb:43:8a:b6:44:02:88:fa:6e:67
Signature hash algorithm: sha256
Subject: CN=Secure Site CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Not valid before: 2018-05-17 12:30:13
Not valid after: 2030-05-17 12:30:13
Issuer:
- Issuer name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.digicert.com/SecureSiteCA.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.digicert.com/SecureSiteCA.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d1:fc:59:2e:72:dd:1c:d0:23:cd:18:18:da:a7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: May 17 12:30:13 2018 GMT
            Not After : May 17 12:30:13 2030 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Secure Site CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:3d:d3:77:d1:e9:28:29:03:4f:14:76:12:
                    84:50:86:47:6b:62:20:ec:a3:cd:91:3b:70:31:2d:
                    7e:d3:c6:12:e5:04:84:0c:ce:03:43:1c:b8:f2:33:
                    fc:75:99:32:c9:4f:49:ff:45:82:9b:c3:65:bf:98:
                    1a:ec:73:80:c6:17:49:72:ff:82:3c:fe:28:69:dc:
                    7c:11:b7:6b:9a:30:07:ac:63:af:eb:8a:07:be:de:
                    c8:9d:ae:ee:cc:b7:77:92:ba:b1:77:47:68:7a:ec:
                    51:a5:31:ef:14:0c:a3:69:48:71:8d:27:d9:c7:4c:
                    21:d5:fe:96:ee:9a:cf:9b:b5:79:d1:57:13:b9:d8:
                    f8:ac:8f:b1:b4:75:d4:70:50:2e:17:3e:1b:71:aa:
                    53:72:bb:b9:69:a6:75:bf:a1:76:ba:c3:02:31:53:
                    3e:c4:9c:44:65:cb:14:33:8b:93:c5:d2:1f:5b:91:
                    54:4c:8d:1d:6c:ff:0d:c9:99:2b:fd:65:73:2f:9f:
                    5a:1b:00:44:e1:95:34:24:a0:65:80:49:ad:90:5a:
                    4b:3d:1e:c9:0b:36:2e:9d:a7:ee:ee:73:24:e5:86:
                    36:e9:60:ce:99:ec:e9:58:38:f3:0f:12:7c:c5:a9:
                    22:cf:29:16:61:3e:60:74:96:04:dd:42:e5:51:ed:
                    f5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C4:11:7E:88:40:86:C2:41:BF:65:F3:1A:E1:B4:53:40:A3:AB:EC:7D
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert-cn.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert-cn.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.2.2
                Policy: 2.23.140.1.2.3

    Signature Algorithm: sha256WithRSAEncryption
         c8:88:67:32:f4:08:80:6b:47:b8:d5:1c:10:c5:45:2c:f6:eb:
         a4:44:af:07:e5:e9:20:81:11:21:df:c7:c9:e2:f0:23:62:58:
         ae:ea:de:55:8c:d4:88:e3:ec:b3:5d:5c:34:b3:2f:09:99:a1:
         f3:3a:ce:40:ec:0a:aa:3a:ca:2f:23:02:71:3f:9f:cc:30:08:
         7b:53:f2:bd:41:67:83:e6:6a:91:a5:65:22:f6:f9:6e:c2:a4:
         0f:12:d2:b8:b6:06:6d:d6:cf:7d:45:ec:c0:50:af:09:b6:37:
         e7:e5:49:94:c5:48:7a:11:3e:25:c7:20:de:d0:d8:60:c6:97:
         ec:5a:c8:1e:62:0c:18:10:6a:ce:0d:ae:9f:1d:04:e9:9b:11:
         93:cf:23:6f:8d:42:11:e1:d7:b4:f4:d7:d1:a0:25:16:52:e9:
         a3:34:c2:dd:68:ba:9f:56:fe:a4:46:28:5a:0c:36:5c:d9:b8:
         e8:00:db:53:50:9d:a5:c8:76:49:aa:8d:26:01:5b:3a:81:92:
         78:26:5e:d2:82:d7:71:7e:79:31:1e:ec:c3:ae:35:b1:c2:8f:
         7c:56:e7:aa:a9:10:54:7b:04:a6:c1:e3:be:6e:d9:e0:8d:57:
         7a:1a:3d:c4:f7:d1:06:20:9a:b7:93:d9:38:1d:73:d4:69:12:
         4b:43:7a:98

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Basic Information

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates