SecureSiteCA.crt: CN=Secure Site CA,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2030-05-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://cacerts.digicert.com/SecureSiteCA.crt" --output cert.crt

Download certificate through wget:

wget -q "http://cacerts.digicert.com/SecureSiteCA.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d1:fc:59:2e:72:dd:1c:d0:23:cd:18:18:da:a7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: May 17 12:30:13 2018 GMT
            Not After : May 17 12:30:13 2030 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Secure Site CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:3d:d3:77:d1:e9:28:29:03:4f:14:76:12:
                    84:50:86:47:6b:62:20:ec:a3:cd:91:3b:70:31:2d:
                    7e:d3:c6:12:e5:04:84:0c:ce:03:43:1c:b8:f2:33:
                    fc:75:99:32:c9:4f:49:ff:45:82:9b:c3:65:bf:98:
                    1a:ec:73:80:c6:17:49:72:ff:82:3c:fe:28:69:dc:
                    7c:11:b7:6b:9a:30:07:ac:63:af:eb:8a:07:be:de:
                    c8:9d:ae:ee:cc:b7:77:92:ba:b1:77:47:68:7a:ec:
                    51:a5:31:ef:14:0c:a3:69:48:71:8d:27:d9:c7:4c:
                    21:d5:fe:96:ee:9a:cf:9b:b5:79:d1:57:13:b9:d8:
                    f8:ac:8f:b1:b4:75:d4:70:50:2e:17:3e:1b:71:aa:
                    53:72:bb:b9:69:a6:75:bf:a1:76:ba:c3:02:31:53:
                    3e:c4:9c:44:65:cb:14:33:8b:93:c5:d2:1f:5b:91:
                    54:4c:8d:1d:6c:ff:0d:c9:99:2b:fd:65:73:2f:9f:
                    5a:1b:00:44:e1:95:34:24:a0:65:80:49:ad:90:5a:
                    4b:3d:1e:c9:0b:36:2e:9d:a7:ee:ee:73:24:e5:86:
                    36:e9:60:ce:99:ec:e9:58:38:f3:0f:12:7c:c5:a9:
                    22:cf:29:16:61:3e:60:74:96:04:dd:42:e5:51:ed:
                    f5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C4:11:7E:88:40:86:C2:41:BF:65:F3:1A:E1:B4:53:40:A3:AB:EC:7D
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert-cn.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert-cn.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.2.2
                Policy: 2.23.140.1.2.3

    Signature Algorithm: sha256WithRSAEncryption
         c8:88:67:32:f4:08:80:6b:47:b8:d5:1c:10:c5:45:2c:f6:eb:
         a4:44:af:07:e5:e9:20:81:11:21:df:c7:c9:e2:f0:23:62:58:
         ae:ea:de:55:8c:d4:88:e3:ec:b3:5d:5c:34:b3:2f:09:99:a1:
         f3:3a:ce:40:ec:0a:aa:3a:ca:2f:23:02:71:3f:9f:cc:30:08:
         7b:53:f2:bd:41:67:83:e6:6a:91:a5:65:22:f6:f9:6e:c2:a4:
         0f:12:d2:b8:b6:06:6d:d6:cf:7d:45:ec:c0:50:af:09:b6:37:
         e7:e5:49:94:c5:48:7a:11:3e:25:c7:20:de:d0:d8:60:c6:97:
         ec:5a:c8:1e:62:0c:18:10:6a:ce:0d:ae:9f:1d:04:e9:9b:11:
         93:cf:23:6f:8d:42:11:e1:d7:b4:f4:d7:d1:a0:25:16:52:e9:
         a3:34:c2:dd:68:ba:9f:56:fe:a4:46:28:5a:0c:36:5c:d9:b8:
         e8:00:db:53:50:9d:a5:c8:76:49:aa:8d:26:01:5b:3a:81:92:
         78:26:5e:d2:82:d7:71:7e:79:31:1e:ec:c3:ae:35:b1:c2:8f:
         7c:56:e7:aa:a9:10:54:7b:04:a6:c1:e3:be:6e:d9:e0:8d:57:
         7a:1a:3d:c4:f7:d1:06:20:9a:b7:93:d9:38:1d:73:d4:69:12:
         4b:43:7a:98

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIEozCCA4ugAwIBAgIQBdH8WS5y3RzQI80YGNqnHzANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
QTAeFw0xODA1MTcxMjMwMTNaFw0zMDA1MTcxMjMwMTNaMFgxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
b20xFzAVBgNVBAMTDlNlY3VyZSBTaXRlIENBMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx7s903fR6SgpA08UdhKEUIZHa2Ig7KPNkTtwMS1+08YS5QSE
DM4DQxy48jP8dZkyyU9J/0WCm8Nlv5ga7HOAxhdJcv+CPP4oadx8EbdrmjAHrGOv
64oHvt7Ina7uzLd3krqxd0doeuxRpTHvFAyjaUhxjSfZx0wh1f6W7prPm7V50VcT
udj4rI+xtHXUcFAuFz4bcapTcru5aaZ1v6F2usMCMVM+xJxEZcsUM4uTxdIfW5FU
TI0dbP8NyZkr/WVzL59aGwBE4ZU0JKBlgEmtkFpLPR7JCzYunafu7nMk5YY26WDO
mezpWDjzDxJ8xakizykWYT5gdJYE3ULlUe31WQIDAQABo4IBXjCCAVowHQYDVR0O
BBYEFMQRfohAhsJBv2XzGuG0U0Cjq+x9MB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj
4hsbw5eyPdFVMA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADA3BggrBgEFBQcBAQQrMCkwJwYI
KwYBBQUHMAGGG2h0dHA6Ly9vY3NwLmRpZ2ljZXJ0LWNuLmNvbTBEBgNVHR8EPTA7
MDmgN6A1hjNodHRwOi8vY3JsLmRpZ2ljZXJ0LWNuLmNvbS9EaWdpQ2VydEdsb2Jh
bFJvb3RDQS5jcmwwVgYDVR0gBE8wTTA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcC
ARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwCAYGZ4EM
AQIDMA0GCSqGSIb3DQEBCwUAA4IBAQDIiGcy9AiAa0e41RwQxUUs9uukRK8H5ekg
gREh38fJ4vAjYliu6t5VjNSI4+yzXVw0sy8JmaHzOs5A7AqqOsovIwJxP5/MMAh7
U/K9QWeD5mqRpWUi9vluwqQPEtK4tgZt1s99RezAUK8Jtjfn5UmUxUh6ET4lxyDe
0NhgxpfsWsgeYgwYEGrODa6fHQTpmxGTzyNvjUIR4de09NfRoCUWUumjNMLdaLqf
Vv6kRihaDDZc2bjoANtTUJ2lyHZJqo0mAVs6gZJ4Jl7SgtdxfnkxHuzDrjWxwo98
VueqqRBUewSmweO+btngjVd6Gj3E99EGIJq3k9k4HXPUaRJLQ3qY
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06