DigiCertBaltimoreCA-2G2.crt: CN=DigiCert Baltimore CA-2 G2,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2025-05-10) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f8:09:8e:a2:e6:26:b9:1a:3b:27:84:1f:b9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
        Validity
            Not Before: Dec  8 12:05:07 2015 GMT
            Not After : May 10 12:00:00 2025 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Baltimore CA-2 G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:00:fe:00:01:73:ef:9b:88:f0:5c:08:75:
                    f0:5c:70:73:1f:ff:b5:7a:1f:8d:08:23:fd:c7:c1:
                    13:3f:b1:21:06:bd:4d:cc:db:2d:b8:87:19:31:de:
                    da:6b:0d:c1:5d:d2:51:d5:b0:5e:72:d4:f0:66:d4:
                    84:f2:91:18:41:b5:09:26:b2:03:96:04:69:95:53:
                    fa:07:4f:3e:be:86:3a:43:2b:b2:59:b5:ab:d1:ba:
                    f4:59:40:72:5a:67:b6:cd:e6:55:fc:09:2b:a4:98:
                    b2:bf:cc:a9:1f:d4:bf:87:8f:82:25:fd:45:80:a9:
                    ec:9d:8c:f9:74:90:cf:1c:f8:65:50:af:cd:f8:45:
                    ab:c8:2f:8d:8e:36:1d:de:ea:89:cd:b2:52:d9:e5:
                    09:cd:36:71:2b:da:c6:d0:9b:c6:f6:a4:5b:5b:39:
                    b6:1f:00:1f:19:a4:fb:d3:be:0c:e6:fb:8f:dd:0e:
                    80:e6:a4:e7:5a:c4:c0:2f:72:ee:91:f3:83:67:c9:
                    cd:ca:ce:4a:b0:20:81:fd:e4:72:af:09:18:e7:4f:
                    42:ec:4d:27:42:4d:07:a0:dd:d5:0d:75:f7:36:60:
                    cc:26:54:98:a1:88:37:f0:83:f7:ad:29:59:20:cf:
                    bb:25:e1:d5:9e:e6:f3:ae:c1:01:eb:b5:06:89:e2:
                    0a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C0:12:B2:28:74:68:46:67:E9:70:25:74:1A:00:45:5B:06:7D:5C:44
            X509v3 Authority Key Identifier: 
                keyid:E5:9D:59:30:82:47:58:CC:AC:FA:08:54:36:86:7B:3A:B5:04:4D:F0

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/Omniroot2025.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         2f:e2:37:66:c3:1a:cf:91:55:ee:29:14:fa:50:10:be:99:8d:
         e2:28:f1:74:16:07:69:3b:44:30:3d:f5:b9:49:f5:68:36:fe:
         b7:30:8d:a9:e0:07:49:42:63:46:52:b5:69:c6:9b:49:f2:1a:
         0f:57:c6:f6:b7:be:ab:75:8d:0d:a2:ab:33:e4:62:85:43:54:
         ab:63:94:0c:a3:53:a0:ea:1d:e4:a6:a6:ac:95:0e:65:78:ec:
         33:8c:be:94:3e:d8:70:ab:ea:c7:e1:78:ce:33:95:bb:fb:2c:
         58:e0:8a:40:a6:6d:41:d8:d8:d9:b3:f9:2f:02:c5:1b:70:6b:
         e2:3a:85:7b:1d:18:b0:d1:4b:9a:c1:6f:17:10:29:e8:0e:c3:
         e1:54:96:54:a5:91:95:08:20:8d:69:2c:9e:2f:3f:50:b4:2e:
         e5:57:1f:af:a4:73:d2:a1:24:bb:0d:90:fe:45:13:1d:a7:a1:
         29:d8:66:0b:c3:d1:6c:b3:4f:b4:2b:84:4c:47:90:ec:8b:e2:
         41:89:13:b6:07:46:77:42:fd:bb:1e:17:fa:ff:25:4b:8e:50:
         57:eb:8e:cc:4e:15:3f:b1:25:dd:41:0c:a0:9c:62:6d:6f:ba:
         97:07:8b:d9:f3:06:10:c5:29:d4:f7:ba:16:90:a8:d0:54:e1:
         4b:49:c7:98

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06