ThawteEVRSACAG2.crt: CN=Thawte EV RSA CA G2,O=DigiCert Inc,C=US

Last Updated: 2022-03-26

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

Certificate download URL: http://cacerts.digicert.com/ThawteEVRSACAG2.crt (DER format)
Serial number: 10315934209045578718865624745448887731
SHA-1 Fingerprint: b0e6383fbdbfce5e5f9d7934fad0fc3c5e030f13
SHA-1 Fingerprint: b0:e6:38:3f:bd:bf:ce:5e:5f:9d:79:34:fa:d0:fc:3c:5e:03:0f:13
SHA-256 Fingerprint: 3286691412f30ece5c065fd62f4392a4762d1e77815338359df390299fbd61ef
SHA-256 Fingerprint: 32:86:69:14:12:f3:0e:ce:5c:06:5f:d6:2f:43:92:a4:76:2d:1e:77:81:53:38:35:9d:f3:90:29:9f:bd:61:ef
Signature hash algorithm: sha256
Subject: CN=Thawte EV RSA CA G2,O=DigiCert Inc,C=US
Not valid before: 2020-07-02 12:43:02
Not valid after: 2030-07-02 12:43:02
Issuer:
- Issuer name: CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.digicert.com/ThawteEVRSACAG2.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.digicert.com/ThawteEVRSACAG2.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c2:c6:d3:2c:6f:0e:0a:ab:ac:0d:d0:f9:fc:d5:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
        Validity
            Not Before: Jul  2 12:43:02 2020 GMT
            Not After : Jul  2 12:43:02 2030 GMT
        Subject: C=US, O=DigiCert Inc, CN=Thawte EV RSA CA G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d9:ea:3b:08:1e:cd:db:98:8a:1e:ec:3b:e7:b9:
                    2b:c6:5f:7e:f9:8e:95:8a:bf:6e:46:7f:bb:b3:f0:
                    66:50:4f:70:c5:54:77:91:4b:43:4a:9f:95:a8:b2:
                    a3:15:35:82:4a:28:42:26:47:51:9b:d9:dc:65:f7:
                    4f:c6:0f:2a:67:82:0b:89:78:15:71:75:3b:60:19:
                    63:e9:1a:7b:8a:3d:77:dc:e9:0c:bc:c8:a4:b5:49:
                    14:2c:12:cd:aa:d8:41:e5:d2:d1:14:fb:fb:f2:36:
                    ba:34:0c:36:5c:a3:1f:78:ec:cc:bc:86:d6:f5:74:
                    bc:74:43:fc:bd:2a:31:2e:6a:04:39:01:77:8b:89:
                    db:62:6a:20:32:2a:74:e1:65:1b:25:0f:c1:0a:fc:
                    47:07:46:f9:0f:01:53:12:7c:6c:82:56:68:68:dd:
                    52:c1:3f:b2:c0:94:b0:3f:47:2a:c0:5f:6f:36:39:
                    f2:bc:94:f6:6a:b0:04:8d:b0:e4:21:9a:c6:4f:4f:
                    72:2e:42:15:f3:ed:15:dc:9c:2a:41:33:e1:9f:66:
                    81:52:3f:af:ae:3b:98:fc:4d:93:24:a8:b4:c0:b9:
                    50:2c:4b:21:98:f3:33:5b:cd:8b:a9:03:b4:26:3d:
                    c2:1f:03:0a:86:d6:80:fd:74:66:a1:d8:68:0a:a1:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6C:2E:E4:61:B4:C3:B9:BD:F0:CA:AD:A6:C1:68:7A:B8:D4:CC:1D:A0
            X509v3 Authority Key Identifier: 
                keyid:4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua

    Signature Algorithm: sha256WithRSAEncryption
         0d:fe:87:e1:1c:6e:d7:6f:32:51:98:c8:47:fb:e4:58:4b:f4:
         3e:76:0a:59:44:24:19:7c:1b:a9:a8:a8:ab:fc:e3:54:2f:fe:
         2e:b2:30:04:ac:04:1f:66:81:43:20:4e:fe:eb:cc:c0:5f:b8:
         3d:24:e1:64:a8:a7:c3:9d:4f:7e:9f:30:3d:c6:81:31:eb:90:
         47:53:c4:21:88:d0:37:7f:8d:8d:1a:4c:20:56:f6:09:4b:5b:
         9c:cb:07:c9:b2:aa:29:25:b7:ae:c4:d3:da:bd:84:20:1b:43:
         ad:9d:c4:7d:e1:20:e5:b7:e7:79:5e:8f:2a:f1:aa:71:04:59:
         ab:90:41:35:31:f5:d6:d7:9d:85:c2:c9:07:ee:c5:ec:64:55:
         cf:c7:0a:09:3c:f4:20:da:50:93:c8:2d:86:30:4d:0f:5f:bb:
         09:1f:99:1d:35:8f:a9:d5:c6:46:a8:85:27:4f:4d:4d:59:a8:
         86:3e:1d:80:bd:d5:c8:e2:00:ae:99:8f:6e:28:0e:0d:ba:7c:
         d1:fc:73:a1:02:5e:a6:41:c5:79:fe:aa:9a:78:96:9c:89:7b:
         1c:0a:53:ad:32:15:fd:43:76:da:06:c2:70:be:5d:a2:c1:af:
         eb:dc:27:39:54:28:99:0b:1a:95:c3:a4:ba:37:ad:03:90:6b:
         b9:38:81:f4

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Basic Information

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates