DigiCertSecureSiteECCCA-1.crt: CN=DigiCert Secure Site ECC CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.digicert.com/DigiCertSecureSiteECCCA-1.crt (DER format)
  • Serial number: 15099003683604006848814258862226398944
  • SHA-1 Fingerprint: 9370c73f6c67904310c912bae29694418d120825
  • SHA-1 Fingerprint: 93:70:c7:3f:6c:67:90:43:10:c9:12:ba:e2:96:94:41:8d:12:08:25
  • SHA-256 Fingerprint: 99935e20424535ec016f337b2be68f1349de66cce4ca5ab367f8f3738215b833
  • SHA-256 Fingerprint: 99:93:5e:20:42:45:35:ec:01:6f:33:7b:2b:e6:8f:13:49:de:66:cc:e4:ca:5a:b3:67:f8:f3:73:82:15:b8:33
  • Signature hash algorithm: sha256
  • Subject: CN=DigiCert Secure Site ECC CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
  • Not valid before: 2019-02-15 12:45:24
  • Not valid after: 2029-02-15 12:45:24
  • Issuer:
    • Issuer name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.digicert.com/DigiCertSecureSiteECCCA-1.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.digicert.com/DigiCertSecureSiteECCCA-1.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5b:f6:5b:6b:a7:fb:d0:8b:29:0d:90:45:37:de:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Feb 15 12:45:24 2019 GMT
            Not After : Feb 15 12:45:24 2029 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Secure Site ECC CA-1
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:e6:bb:75:e1:6b:af:2e:f1:e7:fb:36:4a:f8:a4:
                    52:8a:06:c9:45:84:c6:44:78:3c:03:c4:24:88:54:
                    e5:f1:2e:89:33:7a:cf:5d:0e:39:4b:b9:99:c0:71:
                    aa:5a:7b:ca:10:ce:30:e0:f1:0f:83:dc:74:7b:c9:
                    19:19:bd:df:1a
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DB:35:44:5D:2B:EB:53:AF:9E:0B:F5:71:3D:A3:99:73:AE:FB:5C:53
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         ab:fd:c8:1f:a2:7f:52:f0:7f:e9:0f:4e:10:22:d2:7a:e9:79:
         c6:45:b4:3e:f8:43:cd:82:61:71:12:4e:65:e5:98:59:4e:7b:
         e7:ff:bc:66:70:c9:fc:98:58:c7:8c:1b:11:9f:8f:54:20:cb:
         89:58:62:29:4d:ff:fc:5f:16:ed:97:6c:54:ba:a1:75:55:6b:
         3a:86:49:bf:e2:59:6a:bd:d1:67:5a:e0:c2:16:af:80:70:7a:
         4a:ad:78:da:74:d2:cc:6e:49:dc:ee:fe:8b:63:59:8f:83:09:
         54:ce:6e:28:f0:d4:c7:ae:7d:4f:69:b6:0a:c8:f3:cd:78:45:
         46:76:9c:42:b3:75:40:58:7b:f8:45:0a:5e:6c:41:d6:81:4c:
         70:2f:24:e0:14:a2:e1:96:2f:b0:00:2f:6f:c5:e1:d2:0e:1f:
         1c:4a:bc:7d:b0:30:7d:f3:52:7c:4b:d8:dc:91:1b:02:37:91:
         54:0d:f5:27:58:9f:04:cc:25:89:1c:cf:1c:62:df:7b:28:98:
         c2:f3:d0:21:42:7d:38:38:9e:1f:9b:c3:cc:ba:bd:5e:fb:5d:
         98:5c:c1:3d:79:45:9c:72:88:f4:ba:61:37:ab:14:55:77:5f:
         e0:1f:9d:6a:8f:5d:ac:56:44:89:fb:97:6c:a9:50:ff:64:d1:
         64:f1:5e:06

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: a651bdd 2022-03-26