ThawteEVRSACA2018.crt: CN=Thawte EV RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2027-11-06) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/ThawteEVRSACA2018.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/ThawteEVRSACA2018.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:96:8f:96:4a:e8:23:56:c7:4e:17:c2:b5:36:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
        Validity
            Not Before: Nov  6 12:22:57 2017 GMT
            Not After : Nov  6 12:22:57 2027 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Thawte EV RSA CA 2018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:ae:e7:6c:e6:74:91:67:49:ec:d7:30:ab:
                    cb:d2:bb:28:5a:00:3f:d5:7e:ce:c6:33:10:1e:c0:
                    25:94:80:f5:78:31:bc:df:aa:6d:25:74:93:3e:0f:
                    83:a0:47:a7:1d:f9:0a:cb:0f:be:c1:7a:1b:81:a8:
                    6b:d1:c5:3f:da:ff:11:59:1d:df:20:3e:77:64:38:
                    44:18:7c:d2:f8:e9:7b:57:e1:d1:b5:91:b9:b5:e3:
                    16:09:8e:e0:95:db:41:40:7d:2b:ef:15:04:a7:fd:
                    c8:49:5b:19:51:50:6a:b5:49:8b:54:99:5f:f6:7c:
                    49:0f:a0:b1:a7:82:c1:95:c2:49:f3:e3:7a:91:29:
                    15:f9:f0:3e:59:d4:1c:d0:76:21:5d:28:37:3f:12:
                    4f:ed:74:94:db:c5:9c:ee:07:fa:cb:d9:19:cd:08:
                    4a:e1:6a:d9:2d:1a:c7:1d:b1:c2:d9:05:dd:a9:06:
                    14:c5:1f:76:ed:05:7e:50:23:57:9e:56:d3:71:9c:
                    b6:42:9c:56:4c:f2:f3:2b:ef:dc:29:75:f8:73:03:
                    fa:30:61:7b:fb:c4:67:52:01:e5:8a:3f:f9:57:69:
                    3f:b4:81:7d:7a:9e:01:ef:6b:9c:a9:a4:bf:52:11:
                    0f:a4:83:7f:4f:b0:37:38:0c:3d:f7:9c:ab:07:7f:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E7:01:FC:0C:16:18:CA:7D:B2:8C:EC:87:27:A3:6F:61:81:3B:84:39
            X509v3 Authority Key Identifier: 
                keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         16:1a:46:be:e5:f7:cb:a5:f1:6e:cd:3f:96:97:00:d1:c2:1c:
         93:65:2b:a7:9e:f7:9c:65:66:53:3c:f2:97:8a:9c:a7:8e:95:
         f1:e5:d2:bc:60:6f:b6:5e:81:fb:e3:6f:39:19:1d:54:00:1b:
         af:1c:c1:55:f7:85:de:0c:44:fd:3f:3c:f9:b3:f3:47:4b:5f:
         de:02:be:5e:19:dc:1f:06:5f:34:5f:03:e4:c1:76:98:ab:34:
         6d:c3:a2:78:44:0c:5e:2e:a7:1b:89:b8:54:42:ff:48:7a:ff:
         50:70:fd:24:34:fc:89:bb:8d:77:5e:8b:fb:ea:64:ae:26:51:
         93:84:ac:dc:ba:b2:4f:8a:f7:b6:78:b9:b0:9a:82:20:4c:f1:
         f5:d4:df:c8:20:ef:67:1c:b5:5e:f0:a4:e4:b7:e1:46:81:90:
         8e:58:70:37:91:b1:41:65:1d:fd:32:7d:a1:15:2f:7b:e2:b8:
         54:90:cf:95:4b:d2:9b:0a:24:10:e4:ec:24:7d:b6:7f:e8:12:
         0d:90:4d:42:32:d8:84:49:9d:96:91:bc:49:28:fb:05:dd:d3:
         7b:a7:d0:c5:61:68:90:49:b6:23:14:ff:ab:09:3d:3f:32:46:
         87:1d:85:24:12:f2:cd:3e:0c:89:eb:3d:bd:78:c7:f4:0e:32:
         ee:fd:25:c9

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06