DigiCertBaltimoreSMIMERSASHA2562020CA1.crt: CN=DigiCert Baltimore SMIME RSA SHA256 2020 CA1,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2025-05-11) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertBaltimoreSMIMERSASHA2562020CA1.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertBaltimoreSMIMERSASHA2562020CA1.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2b:09:24:04:01:97:da:84:93:f6:cb:f0:0a:d9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
        Validity
            Not Before: Sep 24 00:00:00 2020 GMT
            Not After : May 11 23:59:59 2025 GMT
        Subject: C=US, O=DigiCert Inc, CN=DigiCert Baltimore SMIME RSA SHA256 2020 CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:cf:92:ad:ef:b3:9f:26:cc:fa:fc:3b:1a:
                    cc:5f:29:90:b8:be:4f:ff:ab:0e:be:46:2f:65:df:
                    73:01:a2:26:36:2a:a5:98:e8:a5:ab:3d:a1:e7:08:
                    af:e8:6b:4c:6a:9a:06:83:72:44:dc:35:27:6b:bc:
                    f4:91:b2:d7:8f:d0:ea:c5:f6:c4:f3:a0:f2:b5:ea:
                    85:84:85:8b:da:83:21:30:6d:88:e8:6c:05:39:d1:
                    f4:69:19:8f:03:0b:39:14:d0:b3:75:7e:2e:fa:e4:
                    f6:25:6d:ab:b0:27:66:69:f4:7c:a1:ae:d6:fe:fc:
                    a5:56:ae:33:87:68:f2:2f:1d:e9:1c:a8:37:11:63:
                    c3:1f:ce:b6:92:b9:ad:c1:e2:b6:9e:32:55:e8:67:
                    67:fb:43:7d:5a:a7:77:a8:8b:a8:4d:01:bd:46:55:
                    8b:00:1b:5a:ea:57:e7:f7:53:7c:c2:d6:5a:43:49:
                    44:95:e6:25:f3:7d:af:29:22:a2:db:8f:de:f9:b7:
                    40:2b:59:b9:f4:b5:ad:d9:2d:29:fa:b3:2c:84:20:
                    df:5a:d4:84:d5:52:10:60:58:8c:23:d5:a1:e8:29:
                    90:f4:e2:62:8b:94:86:f2:4d:8a:50:90:df:9d:8a:
                    1a:b1:78:b6:e8:62:a9:27:1a:84:c1:e7:7e:af:ac:
                    cf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                83:9A:55:DD:42:07:1D:3B:04:F2:C2:48:4A:65:9E:E3:FE:2C:22:B5
            X509v3 Authority Key Identifier: 
                keyid:E5:9D:59:30:82:47:58:CC:AC:FA:08:54:36:86:7B:3A:B5:04:4D:F0

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, E-mail Protection
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/BaltimoreCyberTrustRoot.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/Omniroot2025.crl

                Full Name:
                  URI:http://crl4.digicert.com/Omniroot2025.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.4.1
                Policy: 2.16.840.1.114412.4.2

    Signature Algorithm: sha256WithRSAEncryption
         0c:1d:b4:3b:7b:ea:74:82:32:3f:a2:60:52:3a:55:cd:d0:e3:
         49:7d:ed:5f:7c:ad:25:7e:5d:63:33:8c:de:54:91:3a:18:8a:
         2f:40:fd:d7:9d:b7:2c:2d:33:36:d3:28:c7:40:73:e9:da:e3:
         50:91:a6:64:31:36:b1:7b:30:e7:b1:6b:7c:27:e5:89:43:ed:
         5b:23:0e:ac:a3:3a:b1:e7:1d:cc:84:26:6a:1f:90:a0:42:91:
         9a:7e:e7:c0:61:e5:64:74:b0:4e:48:10:55:70:51:35:08:e3:
         2b:0f:69:ba:d5:1f:99:2d:61:98:44:06:c5:5d:6b:90:fe:82:
         6f:1e:7c:e0:ea:fa:79:69:a3:7c:27:05:a5:bc:9e:91:af:5e:
         73:6a:c4:58:f5:54:05:27:8a:36:d2:37:63:af:b7:3c:8f:62:
         80:02:3f:01:32:31:f7:cf:da:69:61:42:4c:0e:e0:65:77:f5:
         e1:5a:4b:c0:05:87:10:a3:2e:23:6c:ec:6e:ce:bf:04:28:06:
         12:0c:2f:7f:48:9c:83:16:3b:a2:a7:7f:10:90:38:71:e3:b0:
         47:29:09:2b:b9:2c:2e:89:bf:85:50:8e:fb:cf:5d:a3:55:14:
         2b:81:77:c0:c3:db:30:03:21:b9:31:aa:53:cf:81:02:6b:a4:
         77:24:87:f1

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06