RapidSSLRSACA2018.crt: CN=RapidSSL RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US
Page content
CA Certificate Basic Information
This certificate is root certificate used for the issuance of other certificates.
- Certificate download URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt
(
DER
format) - Serial number: 11493844307800274610657794896956183369
- SHA-1 Fingerprint: 98c6a8dc887963ba3cf9c2731cbdd3f7de05ac2d
- SHA-1 Fingerprint: 98:c6:a8:dc:88:79:63:ba:3c:f9:c2:73:1c:bd:d3:f7:de:05:ac:2d
- SHA-256 Fingerprint: c790b47128447ec0b60f22bfcb795d71c326dd910ee12cbb4cc5a86191eb91bc
- SHA-256 Fingerprint: c7:90:b4:71:28:44:7e:c0:b6:0f:22:bf:cb:79:5d:71:c3:26:dd:91:0e:e1:2c:bb:4c:c5:a8:61:91:eb:91:bc
- Signature hash algorithm: sha256
- Subject: CN=RapidSSL RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US
- Not valid before: 2017-11-06 12:23:33
- Not valid after: 2027-11-06 12:23:33
- Issuer:
- Issuer name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer certificate URL: None
Download certificate through curl
:
curl -sSL http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt --output cert.crt
Download certificate through wget
:
wget -q http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt --output-document=cert.crt
CA Certificate Detail Information
Use openssl x509
to decode certificate to get detail information:
openssl x509 -in cert.crt -inform der -text -noout
Decoded detail certificate information:
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a5:a2:46:cd:4b:5c:8c:83:d7:02:b4:bb:ab:53:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
Validity
Not Before: Nov 6 12:23:33 2017 GMT
Not After : Nov 6 12:23:33 2027 GMT
Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=RapidSSL RSA CA 2018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:e5:2d:a8:8a:11:28:f6:79:e9:7b:3a:33:88:3b:
71:e1:65:8b:2c:29:65:fd:ed:2d:d4:46:1e:98:4e:
67:f8:c8:0f:e6:f8:9a:1c:bc:be:56:91:cf:fa:77:
57:e4:3d:7c:20:d2:2e:b8:05:7c:c0:5a:b6:e8:a1:
79:53:45:8d:21:98:90:a7:a9:8b:b4:85:a3:51:e5:
83:3c:0d:bc:39:ec:a1:4e:58:fd:4c:b9:36:6d:ec:
ad:6e:d1:54:eb:2a:5b:a5:65:25:b6:6b:d8:e5:5f:
27:82:ca:42:ee:71:51:34:28:e9:7e:70:c4:0f:69:
11:c8:9c:ce:f3:2a:0a:30:5c:f8:27:82:44:f0:de:
cd:03:5b:89:c1:41:05:31:4b:c7:2e:cd:2c:70:ba:
0f:66:42:9c:7b:02:11:9b:54:55:d8:0c:66:15:0c:
49:91:d7:fb:60:df:4f:72:49:22:7f:65:e0:9b:76:
f8:f0:16:67:d3:37:f4:a9:7b:12:78:6b:bc:e2:e6:
bd:83:0c:e3:cc:8e:ed:6d:30:63:6b:24:e9:4f:ef:
d7:a5:6b:81:56:fe:9f:bd:aa:c8:e9:b8:a4:28:1f:
39:f4:e4:86:42:ec:3b:dd:75:e0:7a:e1:70:10:f1:
d3:21:1a:14:b6:4c:ee:df:f1:10:f8:bb:70:ce:79:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CA:17:59:FC:6B:C0:03:21:2F:1A:AE:E4:AA:A8:1C:82:56:DA:75
X509v3 Authority Key Identifier:
keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
X509v3 Key Usage: critical
Digital Signature, Certificate Sign, CRL Sign
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl
X509v3 Certificate Policies:
Policy: 2.16.840.1.114412.1.2
CPS: https://www.digicert.com/CPS
Policy: 2.16.840.1.114412.1.1
Policy: 2.23.140.1.2.1
Policy: 2.23.140.1.2.2
Signature Algorithm: sha256WithRSAEncryption
7e:23:c7:f2:ca:35:6e:59:92:51:5c:61:6b:3c:12:36:e6:d2:
7c:b3:29:e6:42:d8:a3:95:61:1e:cf:f2:07:af:2b:2b:25:5a:
6e:17:a3:80:52:cc:aa:f6:df:91:6c:27:86:85:b7:ac:80:8a:
fd:5e:63:4b:59:fd:93:75:f1:b3:86:48:64:ad:a0:47:3f:24:
4e:28:70:8c:eb:f0:fe:4c:83:5d:64:45:81:db:9a:06:27:af:
54:71:7a:48:b9:99:27:9b:df:d0:c6:c5:3a:49:0f:89:06:86:
ce:65:5c:da:28:e1:ca:27:52:28:89:c0:a6:aa:1f:bb:e1:d9:
b6:ab:c9:df:29:30:84:9a:83:cd:c9:52:ac:95:19:cd:ad:58:
fa:4e:d3:7d:bd:fc:25:aa:da:4a:f2:aa:fe:ba:39:23:23:c2:
e9:54:cf:47:57:7f:83:87:41:ab:11:ec:23:5f:22:bf:b8:29:
27:1c:e8:00:65:43:94:43:17:ce:8f:19:e1:3a:91:dc:12:42:
41:62:07:f7:10:ca:c3:72:ab:48:c4:0d:04:e4:7d:ad:a9:8e:
6b:96:b4:c0:8d:6c:19:e1:15:70:58:7a:37:ee:6c:88:5a:51:
b1:2f:d8:53:90:07:77:42:6a:ff:85:3e:0e:5e:12:f7:97:4d:
5c:8c:9c:6a
CA Certificate in PEM Format
Use openssl x509
to convert certificate from DER
format to PEM
format:
openssl x509 -in cert.crt -inform der
Converted PEM
format certificate:
-----BEGIN CERTIFICATE-----
MIIEsTCCA5mgAwIBAgIQCKWiRs1LXIyD1wK0u6tTSTANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
QTAeFw0xNzExMDYxMjIzMzNaFw0yNzExMDYxMjIzMzNaMF4xCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
b20xHTAbBgNVBAMTFFJhcGlkU1NMIFJTQSBDQSAyMDE4MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA5S2oihEo9nnpezoziDtx4WWLLCll/e0t1EYemE5n
+MgP5viaHLy+VpHP+ndX5D18INIuuAV8wFq26KF5U0WNIZiQp6mLtIWjUeWDPA28
OeyhTlj9TLk2beytbtFU6ypbpWUltmvY5V8ngspC7nFRNCjpfnDED2kRyJzO8yoK
MFz4J4JE8N7NA1uJwUEFMUvHLs0scLoPZkKcewIRm1RV2AxmFQxJkdf7YN9Pckki
f2Xgm3b48BZn0zf0qXsSeGu84ua9gwzjzI7tbTBjayTpT+/XpWuBVv6fvarI6bik
KB859OSGQuw73XXgeuFwEPHTIRoUtkzu3/EQ+LtwznkkdQIDAQABo4IBZjCCAWIw
HQYDVR0OBBYEFFPKF1n8a8ADIS8aruSqqByCVtp1MB8GA1UdIwQYMBaAFAPeUDVW
0Uy7ZvCj4hsbw5eyPdFVMA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADA0BggrBgEFBQcBAQQo
MCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBCBgNVHR8E
OzA5MDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9i
YWxSb290Q0EuY3JsMGMGA1UdIARcMFowNwYJYIZIAYb9bAECMCowKAYIKwYBBQUH
AgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCwYJYIZIAYb9bAEBMAgG
BmeBDAECATAIBgZngQwBAgIwDQYJKoZIhvcNAQELBQADggEBAH4jx/LKNW5ZklFc
YWs8Ejbm0nyzKeZC2KOVYR7P8gevKyslWm4Xo4BSzKr235FsJ4aFt6yAiv1eY0tZ
/ZN18bOGSGStoEc/JE4ocIzr8P5Mg11kRYHbmgYnr1Rxeki5mSeb39DGxTpJD4kG
hs5lXNoo4conUiiJwKaqH7vh2baryd8pMISag83JUqyVGc2tWPpO0329/CWq2kry
qv66OSMjwulUz0dXf4OHQasR7CNfIr+4KScc6ABlQ5RDF86PGeE6kdwSQkFiB/cQ
ysNyq0jEDQTkfa2pjmuWtMCNbBnhFXBYejfubIhaUbEv2FOQB3dCav+FPg5eEveX
TVyMnGo=
-----END CERTIFICATE-----
Also see Top 1 Millions Domains CA Certificate List